From 45232145d9ad3aa3ac45e2ccf63593ca2e61e50c Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy Date: Fri, 4 Jun 2021 12:25:16 +0300 Subject: [PATCH] po/ipa.pot: Update translations to FreeIPA ipa-4-9 state Signed-off-by: Alexander Bokovoy --- po/ipa.pot | 21656 ++++++++++++++++++++++++++------------------------- 1 file changed, 10842 insertions(+), 10814 deletions(-) diff --git a/po/ipa.pot b/po/ipa.pot index 54ed09aae..1876aabb5 100644 --- a/po/ipa.pot +++ b/po/ipa.pot @@ -6,9 +6,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: freeipa 4.10.0.dev202103310611+git68a5fe822\n" +"Project-Id-Version: freeipa 4.9.4.dev202106040924+git3dd8c4d51\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-03-31 09:12+0300\n" +"POT-Creation-Date: 2021-06-04 12:24+0300\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -18,325 +18,6 @@ msgstr "" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n" -#: client/ipa-join.c:66 client/ipa-join.c:422 client/ipa-join.c:440 -#: client/ipa-join.c:540 client/ipa-join.c:1089 util/ipa_krb5.c:1024 -#: util/ipa_krb5.c:1058 -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#: client/ipa-join.c:81 client/ipa-join.c:826 -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#: client/ipa-join.c:111 client/ipa-join.c:123 -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#: client/ipa-join.c:128 -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#: client/ipa-join.c:152 client/ipa-join.c:181 client/ipa-join.c:232 -#, c-format -msgid "Out of memory!" -msgstr "" - -#: client/ipa-join.c:243 -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#: client/ipa-join.c:261 client/ipa-getkeytab.c:221 -msgid "SASL Bind failed\n" -msgstr "" - -#: client/ipa-join.c:335 -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#: client/ipa-join.c:355 -#, c-format -msgid "No values for %s" -msgstr "" - -#: client/ipa-join.c:365 -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#: client/ipa-join.c:371 -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#: client/ipa-join.c:429 -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#: client/ipa-join.c:475 -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#: client/ipa-join.c:595 -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#: client/ipa-join.c:610 client/ipa-join.c:964 -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#: client/ipa-join.c:637 -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#: client/ipa-join.c:646 -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#: client/ipa-join.c:658 -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#: client/ipa-join.c:687 -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#: client/ipa-join.c:696 -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#: client/ipa-join.c:747 -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#: client/ipa-join.c:755 -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#: client/ipa-join.c:762 -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#: client/ipa-join.c:773 -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#: client/ipa-join.c:776 -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#: client/ipa-join.c:783 -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#: client/ipa-join.c:818 -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:852 -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:868 -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#: client/ipa-join.c:901 client/ipa-join.c:994 -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:945 client/ipa-join.c:1025 -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#: client/ipa-join.c:1041 client/ipa-join.c:1120 -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#: client/ipa-join.c:1044 client/ipa-join.c:1123 -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#: client/ipa-join.c:1128 -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#: client/ipa-join.c:1170 client/ipa-join.c:1310 -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#: client/ipa-join.c:1182 client/ipa-join.c:1320 -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#: client/ipa-join.c:1189 -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#: client/ipa-join.c:1197 -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#: client/ipa-join.c:1216 -#, c-format -msgid "fork() failed\n" -msgstr "" - -#: client/ipa-join.c:1245 -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#: client/ipa-join.c:1248 -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#: client/ipa-join.c:1251 -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#: client/ipa-join.c:1263 -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#: client/ipa-join.c:1329 -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#: client/ipa-join.c:1338 -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#: client/ipa-join.c:1349 -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#: client/ipa-join.c:1368 -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#: client/ipa-join.c:1380 client/ipa-join.c:1388 -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#: client/ipa-join.c:1397 -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -#: client/ipa-join.c:1453 -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -#: client/ipa-join.c:1455 -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -#: client/ipa-join.c:1457 -msgid "Unenroll this host from IPA server" -msgstr "" - -#: client/ipa-join.c:1459 -msgid "Hostname of this server" -msgstr "" - -#: client/ipa-join.c:1459 client/ipa-join.c:1461 -msgid "hostname" -msgstr "" - -#: client/ipa-join.c:1461 -msgid "IPA Server to use" -msgstr "" - -#: client/ipa-join.c:1463 -msgid "Specifies where to store keytab information." -msgstr "" - -#: client/ipa-join.c:1463 -msgid "filename" -msgstr "" - -#: client/ipa-join.c:1465 -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -#: client/ipa-join.c:1467 -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#: client/ipa-join.c:1467 -msgid "password" -msgstr "" - -#: client/ipa-join.c:1469 -msgid "LDAP basedn" -msgstr "" - -#: client/ipa-join.c:1469 -msgid "basedn" -msgstr "" - -#: client/ipa-join.c:1503 -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#: client/ipa-join.c:1509 -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#: client/ipa-join.c:1515 -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - #: client/ipa-getkeytab.c:84 #, c-format msgid "Kerberos context initialization failed: %1$s (%2$d)\n" @@ -366,6 +47,10 @@ msgstr "" msgid "Simple bind failed\n" msgstr "" +#: client/ipa-getkeytab.c:221 client/ipa-join.c:261 +msgid "SASL Bind failed\n" +msgstr "" + #: client/ipa-getkeytab.c:252 #, c-format msgid "Operation failed: %s\n" @@ -825,6 +510,321 @@ msgstr "" msgid "read error\n" msgstr "" +#: client/ipa-join.c:66 client/ipa-join.c:422 client/ipa-join.c:440 +#: client/ipa-join.c:540 client/ipa-join.c:1089 util/ipa_krb5.c:1024 +#: util/ipa_krb5.c:1058 +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#: client/ipa-join.c:81 client/ipa-join.c:826 +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#: client/ipa-join.c:111 client/ipa-join.c:123 +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#: client/ipa-join.c:128 +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#: client/ipa-join.c:152 client/ipa-join.c:181 client/ipa-join.c:232 +#, c-format +msgid "Out of memory!" +msgstr "" + +#: client/ipa-join.c:243 +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +#: client/ipa-join.c:335 +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#: client/ipa-join.c:355 +#, c-format +msgid "No values for %s" +msgstr "" + +#: client/ipa-join.c:365 +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#: client/ipa-join.c:371 +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#: client/ipa-join.c:429 +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#: client/ipa-join.c:475 +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#: client/ipa-join.c:595 +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#: client/ipa-join.c:610 client/ipa-join.c:964 +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#: client/ipa-join.c:637 +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#: client/ipa-join.c:646 +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#: client/ipa-join.c:658 +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#: client/ipa-join.c:687 +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#: client/ipa-join.c:696 +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#: client/ipa-join.c:747 +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#: client/ipa-join.c:755 +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#: client/ipa-join.c:762 +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#: client/ipa-join.c:773 +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#: client/ipa-join.c:776 +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#: client/ipa-join.c:783 +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#: client/ipa-join.c:818 +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#: client/ipa-join.c:852 +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#: client/ipa-join.c:868 +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#: client/ipa-join.c:901 client/ipa-join.c:994 +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#: client/ipa-join.c:945 client/ipa-join.c:1025 +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#: client/ipa-join.c:1041 client/ipa-join.c:1120 +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#: client/ipa-join.c:1044 client/ipa-join.c:1123 +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#: client/ipa-join.c:1128 +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#: client/ipa-join.c:1170 client/ipa-join.c:1310 +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#: client/ipa-join.c:1182 client/ipa-join.c:1320 +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#: client/ipa-join.c:1189 +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#: client/ipa-join.c:1197 +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#: client/ipa-join.c:1216 +#, c-format +msgid "fork() failed\n" +msgstr "" + +#: client/ipa-join.c:1245 +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#: client/ipa-join.c:1248 +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#: client/ipa-join.c:1251 +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#: client/ipa-join.c:1263 +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#: client/ipa-join.c:1329 +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#: client/ipa-join.c:1338 +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#: client/ipa-join.c:1349 +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#: client/ipa-join.c:1368 +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#: client/ipa-join.c:1380 client/ipa-join.c:1388 +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#: client/ipa-join.c:1397 +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +#: client/ipa-join.c:1453 +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +#: client/ipa-join.c:1455 +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +#: client/ipa-join.c:1457 +msgid "Unenroll this host from IPA server" +msgstr "" + +#: client/ipa-join.c:1459 +msgid "Hostname of this server" +msgstr "" + +#: client/ipa-join.c:1459 client/ipa-join.c:1461 +msgid "hostname" +msgstr "" + +#: client/ipa-join.c:1461 +msgid "IPA Server to use" +msgstr "" + +#: client/ipa-join.c:1463 +msgid "Specifies where to store keytab information." +msgstr "" + +#: client/ipa-join.c:1463 +msgid "filename" +msgstr "" + +#: client/ipa-join.c:1465 +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +#: client/ipa-join.c:1467 +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +#: client/ipa-join.c:1467 +msgid "password" +msgstr "" + +#: client/ipa-join.c:1469 +msgid "LDAP basedn" +msgstr "" + +#: client/ipa-join.c:1469 +msgid "basedn" +msgstr "" + +#: client/ipa-join.c:1503 +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#: client/ipa-join.c:1509 +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#: client/ipa-join.c:1515 +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + #: ipaclient/frontend.py:28 ipaclient/frontend.py:90 #: ipaserver/plugins/baseldap.py:53 msgid "Failed members" @@ -875,13 +875,13 @@ msgstr "" msgid "Failed managedby" msgstr "" -#: ipaclient/frontend.py:81 ipaserver/plugins/service.py:158 -#: ipaserver/plugins/host.py:236 +#: ipaclient/frontend.py:81 ipaserver/plugins/host.py:236 +#: ipaserver/plugins/service.py:158 msgid "Failed allowed to retrieve keytab" msgstr "" -#: ipaclient/frontend.py:85 ipaserver/plugins/service.py:161 -#: ipaserver/plugins/host.py:239 +#: ipaclient/frontend.py:85 ipaserver/plugins/host.py:239 +#: ipaserver/plugins/service.py:161 msgid "Failed allowed to create keytab" msgstr "" @@ -1045,13 +1045,13 @@ msgid "" msgstr "" #: ipaclient/plugins/otptoken_yubikey.py:47 ipaserver/plugins/serverrole.py:19 -#: ipaserver/plugins/schema.py:34 ipaserver/plugins/sudorule.py:71 +#: ipaserver/plugins/radiusproxy.py:43 ipaserver/plugins/vault.py:90 +#: ipaserver/plugins/ca.py:35 ipaserver/plugins/location.py:37 +#: ipaserver/plugins/host.py:104 ipaserver/plugins/otptoken.py:49 #: ipaserver/plugins/cert.py:99 ipaserver/plugins/certmap.py:60 -#: ipaserver/plugins/permission.py:97 ipaserver/plugins/radiusproxy.py:43 -#: ipaserver/plugins/location.py:37 ipaserver/plugins/dnsserver.py:39 -#: ipaserver/plugins/host.py:104 ipaserver/plugins/automember.py:63 -#: ipaserver/plugins/vault.py:90 ipaserver/plugins/server.py:40 -#: ipaserver/plugins/ca.py:35 ipaserver/plugins/otptoken.py:49 +#: ipaserver/plugins/dnsserver.py:39 ipaserver/plugins/schema.py:34 +#: ipaserver/plugins/server.py:40 ipaserver/plugins/permission.py:97 +#: ipaserver/plugins/sudorule.py:71 ipaserver/plugins/automember.py:63 msgid "" "\n" "EXAMPLES:\n" @@ -1145,7 +1145,66 @@ msgstr "" msgid "preserve and no-preserve cannot be both set" msgstr "" -#: ipaclient/plugins/dns.py:137 ipaserver/plugins/dns.py:3548 +#: ipaclient/plugins/otptoken.py:66 +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +#: ipaclient/plugins/otptoken.py:82 +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +#: ipaclient/plugins/otptoken.py:137 +msgid "Synchronize an OTP token." +msgstr "" + +#: ipaclient/plugins/otptoken.py:142 +msgid "User ID" +msgstr "" + +#: ipaclient/plugins/otptoken.py:143 ipaclient/remote_plugins/2_114/host.py:187 +#: ipaserver/plugins/internal.py:408 ipaserver/plugins/internal.py:1695 +#: ipaserver/plugins/migration.py:534 ipaserver/plugins/baseldap.py:50 +#: ipaserver/plugins/baseuser.py:277 +msgid "Password" +msgstr "" + +#: ipaclient/plugins/otptoken.py:144 +msgid "First Code" +msgstr "" + +#: ipaclient/plugins/otptoken.py:145 +msgid "Second Code" +msgstr "" + +#: ipaclient/plugins/otptoken.py:149 ipaserver/plugins/internal.py:1705 +msgid "Token ID" +msgstr "" + +#: ipaclient/plugins/cert.py:39 ipaclient/plugins/ca.py:19 +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +#: ipaclient/plugins/cert.py:107 +msgid "Unrevoked" +msgstr "" + +#: ipaclient/plugins/cert.py:110 ipaserver/plugins/internal.py:293 +msgid "Error" +msgstr "" + +#: ipaclient/plugins/cert.py:120 +msgid "Input filename" +msgstr "" + +#: ipaclient/plugins/cert.py:121 +msgid "File to load the certificate from." +msgstr "" + +#: ipaclient/plugins/dns.py:137 ipaserver/plugins/dns.py:3555 msgid "Split DNS record to parts" msgstr "" @@ -1191,7 +1250,7 @@ msgid_plural "" msgstr[0] "" msgstr[1] "" -#: ipaclient/plugins/dns.py:329 ipaserver/plugins/dns.py:3848 +#: ipaclient/plugins/dns.py:329 ipaserver/plugins/dns.py:3855 msgid "" "Neither --del-all nor options to delete a specific record provided.\n" "Command help may be consulted for all supported record types." @@ -1291,7 +1350,7 @@ msgstr "" msgid "Modify a vault." msgstr "" -#: ipaclient/plugins/vault.py:373 ipaserver/plugins/internal.py:1711 +#: ipaclient/plugins/vault.py:373 ipaserver/plugins/internal.py:1712 msgid "Change password" msgstr "" @@ -1389,65 +1448,6 @@ msgstr "" msgid "Missing vault private key" msgstr "" -#: ipaclient/plugins/ca.py:19 ipaclient/plugins/cert.py:39 -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -#: ipaclient/plugins/cert.py:107 -msgid "Unrevoked" -msgstr "" - -#: ipaclient/plugins/cert.py:110 ipaserver/plugins/internal.py:293 -msgid "Error" -msgstr "" - -#: ipaclient/plugins/cert.py:120 -msgid "Input filename" -msgstr "" - -#: ipaclient/plugins/cert.py:121 -msgid "File to load the certificate from." -msgstr "" - -#: ipaclient/plugins/otptoken.py:66 -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -#: ipaclient/plugins/otptoken.py:82 -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -#: ipaclient/plugins/otptoken.py:137 -msgid "Synchronize an OTP token." -msgstr "" - -#: ipaclient/plugins/otptoken.py:142 -msgid "User ID" -msgstr "" - -#: ipaclient/plugins/otptoken.py:143 ipaclient/remote_plugins/2_114/host.py:187 -#: ipaserver/plugins/internal.py:408 ipaserver/plugins/internal.py:1694 -#: ipaserver/plugins/migration.py:534 ipaserver/plugins/baseldap.py:50 -#: ipaserver/plugins/baseuser.py:277 -msgid "Password" -msgstr "" - -#: ipaclient/plugins/otptoken.py:144 -msgid "First Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:145 -msgid "Second Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:149 ipaserver/plugins/internal.py:1704 -msgid "Token ID" -msgstr "" - msgid "" "\n" "Directory Server Access Control Instructions (ACIs)\n" @@ -1572,7 +1572,7 @@ msgstr "" msgid "ACI name" msgstr "" -#: ipaserver/plugins/aci.py:451 +#: ipaserver/plugins/permission.py:231 msgid "Permission" msgstr "" @@ -1587,8 +1587,8 @@ msgstr "" msgid "User group ACI grants access to" msgstr "" -#: ipaserver/plugins/permission.py:230 ipaserver/plugins/selfservice.py:84 -#: ipaserver/plugins/aci.py:463 ipaserver/plugins/delegation.py:81 +#: ipaserver/plugins/aci.py:463 ipaserver/plugins/selfservice.py:84 +#: ipaserver/plugins/delegation.py:81 ipaserver/plugins/permission.py:230 #: ipaserver/plugins/baseldap.py:74 msgid "Permissions" msgstr "" @@ -1599,14 +1599,13 @@ msgstr "" msgid "Attributes to which the permission applies" msgstr "" -#: ipaserver/plugins/selfservice.py:89 ipaserver/plugins/aci.py:472 +#: ipaserver/plugins/aci.py:472 ipaserver/plugins/selfservice.py:89 #: ipaserver/plugins/delegation.py:86 msgid "Attributes" msgstr "" +#: ipaserver/plugins/vault.py:600 ipaserver/plugins/otptoken.py:165 #: ipaserver/plugins/schema.py:447 ipaserver/plugins/permission.py:346 -#: ipaserver/plugins/aci.py:477 ipaserver/plugins/vault.py:600 -#: ipaserver/plugins/otptoken.py:165 msgid "Type" msgstr "" @@ -1620,21 +1619,21 @@ msgid "Member of a group" msgstr "" #: ipaserver/plugins/internal.py:216 ipaserver/plugins/internal.py:1214 -#: ipaserver/plugins/internal.py:1723 ipaserver/plugins/aci.py:490 +#: ipaserver/plugins/internal.py:1724 ipaserver/plugins/aci.py:490 msgid "Filter" msgstr "" msgid "Legal LDAP filter (e.g. ou=Engineering)" msgstr "" -#: ipaserver/plugins/permission.py:289 ipaserver/plugins/aci.py:496 +#: ipaserver/plugins/permission.py:289 msgid "Subtree" msgstr "" msgid "Subtree to apply ACI to" msgstr "" -#: ipaserver/plugins/permission.py:340 ipaserver/plugins/aci.py:502 +#: ipaserver/plugins/permission.py:340 msgid "Target group" msgstr "" @@ -1706,8 +1705,7 @@ msgstr "" msgid "A string searched in all relevant object attributes" msgstr "" -#: ipaserver/plugins/schema.py:127 ipaserver/plugins/cert.py:1563 -#: ipaserver/plugins/baseldap.py:1948 +#: ipaserver/plugins/schema.py:127 ipaserver/plugins/baseldap.py:1948 msgid "Primary key only" msgstr "" @@ -1843,8 +1841,8 @@ msgid "" " ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" -#: ipaserver/plugins/automount.py:465 ipaserver/plugins/automount.py:712 -#: ipaserver/plugins/automount.py:819 ipaserver/plugins/otptoken.py:219 +#: ipaserver/plugins/otptoken.py:219 ipaserver/plugins/automount.py:465 +#: ipaserver/plugins/automount.py:712 ipaserver/plugins/automount.py:819 msgid "Key" msgstr "" @@ -1862,7 +1860,7 @@ msgstr "" msgid "description" msgstr "" -#: ipaserver/plugins/host.py:478 ipaserver/plugins/server.py:132 +#: ipaserver/plugins/automount.py:252 ipaserver/plugins/server.py:132 msgid "Location" msgstr "" @@ -1878,18 +1876,18 @@ msgstr "" msgid "Automount map name." msgstr "" -#: ipaserver/plugins/sudorule.py:238 ipaserver/plugins/certmap.py:279 -#: ipaserver/plugins/sudocmdgroup.py:130 ipaserver/plugins/hostgroup.py:193 -#: ipaserver/plugins/radiusproxy.py:117 ipaserver/plugins/location.py:111 -#: ipaserver/plugins/sudocmd.py:128 ipaserver/plugins/group.py:342 -#: ipaserver/plugins/automount.py:364 ipaserver/plugins/idviews.py:142 -#: ipaserver/plugins/idviews.py:775 ipaserver/plugins/caacl.py:175 -#: ipaserver/plugins/host.py:468 ipaserver/plugins/hbacsvc.py:108 -#: ipaserver/plugins/hbacsvcgroup.py:120 ipaserver/plugins/privilege.py:159 -#: ipaserver/plugins/role.py:153 ipaserver/plugins/netgroup.py:210 -#: ipaserver/plugins/automember.py:257 ipaserver/plugins/selinuxusermap.py:265 +#: ipaserver/plugins/sudocmdgroup.py:130 ipaserver/plugins/radiusproxy.py:117 #: ipaserver/plugins/vault.py:594 ipaserver/plugins/ca.py:89 -#: ipaserver/plugins/otptoken.py:174 ipaserver/plugins/hbacrule.py:253 +#: ipaserver/plugins/location.py:111 ipaserver/plugins/privilege.py:159 +#: ipaserver/plugins/host.py:468 ipaserver/plugins/hostgroup.py:193 +#: ipaserver/plugins/otptoken.py:174 ipaserver/plugins/automount.py:364 +#: ipaserver/plugins/caacl.py:175 ipaserver/plugins/certmap.py:279 +#: ipaserver/plugins/group.py:342 ipaserver/plugins/hbacsvc.py:108 +#: ipaserver/plugins/hbacsvcgroup.py:120 ipaserver/plugins/idviews.py:142 +#: ipaserver/plugins/idviews.py:775 ipaserver/plugins/netgroup.py:210 +#: ipaserver/plugins/selinuxusermap.py:265 ipaserver/plugins/sudocmd.py:128 +#: ipaserver/plugins/sudorule.py:238 ipaserver/plugins/automember.py:257 +#: ipaserver/plugins/hbacrule.py:253 msgid "Description" msgstr "" @@ -1925,7 +1923,7 @@ msgstr "" msgid "Search for an automount key." msgstr "" -#: ipaserver/plugins/serverrole.py:123 ipaserver/plugins/cert.py:1568 +#: ipaserver/plugins/serverrole.py:123 ipaserver/plugins/cert.py:1574 #: ipaserver/plugins/pkinit.py:71 ipaserver/plugins/baseldap.py:1967 msgid "Time Limit" msgstr "" @@ -1933,8 +1931,8 @@ msgstr "" msgid "Time limit of search in seconds" msgstr "" -#: ipaserver/plugins/serverrole.py:131 ipaserver/plugins/cert.py:1573 -#: ipaserver/plugins/hbactest.py:304 ipaserver/plugins/pkinit.py:79 +#: ipaserver/plugins/serverrole.py:131 ipaserver/plugins/hbactest.py:304 +#: ipaserver/plugins/cert.py:1579 ipaserver/plugins/pkinit.py:79 #: ipaserver/plugins/baseldap.py:1974 msgid "Size Limit" msgstr "" @@ -2567,7 +2565,7 @@ msgid "" "standard format \"IP_ADDRESS port PORT\"" msgstr "" -#: ipaserver/plugins/dns.py:2042 ipaserver/plugins/dns.py:4096 +#: ipaserver/plugins/dns.py:2049 ipaserver/plugins/dns.py:4103 msgid "Forward policy" msgstr "" @@ -2576,7 +2574,7 @@ msgid "" "forwarders." msgstr "" -#: ipaserver/plugins/dns.py:4103 +#: ipaserver/plugins/dns.py:4110 msgid "Allow PTR sync" msgstr "" @@ -2618,11 +2616,11 @@ msgid "" "forwarders are disregarded." msgstr "" -#: ipaserver/plugins/dns.py:3031 +#: ipaserver/plugins/dns.py:3038 msgid "Record name" msgstr "" -#: ipaserver/plugins/dns.py:3036 ipaserver/plugins/dns.py:3037 +#: ipaserver/plugins/dns.py:3043 ipaserver/plugins/dns.py:3044 msgid "Time to live" msgstr "" @@ -2632,7 +2630,7 @@ msgstr "" msgid "Record type" msgstr "" -#: ipaserver/plugins/dns.py:1549 +#: ipaserver/plugins/dns.py:1556 msgid "Record data" msgstr "" @@ -2645,7 +2643,7 @@ msgstr "" msgid "A IP Address" msgstr "" -#: ipaserver/plugins/dns.py:953 ipaserver/plugins/dns.py:976 +#: ipaserver/plugins/dns.py:960 ipaserver/plugins/dns.py:983 msgid "IP Address" msgstr "" @@ -2691,8 +2689,8 @@ msgstr "" msgid "AFSDB Hostname" msgstr "" -#: ipaserver/plugins/dns.py:1027 ipaserver/plugins/dns.py:1276 -#: ipaserver/plugins/dns.py:1339 +#: ipaserver/plugins/dns.py:1034 ipaserver/plugins/dns.py:1283 +#: ipaserver/plugins/dns.py:1346 msgid "Hostname" msgstr "" @@ -2717,15 +2715,15 @@ msgstr "" msgid "CERT Key Tag" msgstr "" -#: ipaserver/plugins/dns.py:1051 +#: ipaserver/plugins/dns.py:1058 msgid "Key Tag" msgstr "" msgid "CERT Algorithm" msgstr "" -#: ipaserver/plugins/dns.py:1013 ipaserver/plugins/dns.py:1056 -#: ipaserver/plugins/dns.py:1405 +#: ipaserver/plugins/dns.py:1020 ipaserver/plugins/dns.py:1063 +#: ipaserver/plugins/dns.py:1412 msgid "Algorithm" msgstr "" @@ -2786,7 +2784,7 @@ msgstr "" msgid "DNAME Target" msgstr "" -#: ipaserver/plugins/dns.py:1041 ipaserver/plugins/dns.py:1372 +#: ipaserver/plugins/dns.py:1048 ipaserver/plugins/dns.py:1379 msgid "Target" msgstr "" @@ -2841,7 +2839,7 @@ msgstr "" msgid "KX Preference" msgstr "" -#: ipaserver/plugins/dns.py:1260 +#: ipaserver/plugins/dns.py:1267 msgid "Preference given to this exchanger. Lower values are more preferred" msgstr "" @@ -2959,7 +2957,7 @@ msgstr "" msgid "NAPTR Preference" msgstr "" -#: ipaserver/plugins/dns.py:1259 ipaserver/plugins/dns.py:1307 +#: ipaserver/plugins/dns.py:1266 ipaserver/plugins/dns.py:1314 msgid "Preference" msgstr "" @@ -2972,9 +2970,9 @@ msgstr "" msgid "NAPTR Service" msgstr "" -#: ipaserver/plugins/service.py:467 ipaserver/plugins/internal.py:1331 -#: ipaserver/plugins/internal.py:1656 ipaserver/plugins/hbactest.py:285 -#: ipaserver/plugins/dns.py:1317 +#: ipaserver/plugins/hbactest.py:285 ipaserver/plugins/internal.py:1332 +#: ipaserver/plugins/internal.py:1657 ipaserver/plugins/service.py:467 +#: ipaserver/plugins/dns.py:1324 msgid "Service" msgstr "" @@ -3063,7 +3061,7 @@ msgstr "" msgid "SRV Weight" msgstr "" -#: ipaserver/plugins/dns.py:1491 +#: ipaserver/plugins/dns.py:1498 msgid "Weight" msgstr "" @@ -3168,7 +3166,7 @@ msgstr "" msgid "Authoritative nameserver domain name" msgstr "" -#: ipaserver/plugins/dns.py:2422 +#: ipaserver/plugins/dns.py:2429 msgid "Administrator e-mail address" msgstr "" @@ -3205,7 +3203,7 @@ msgstr "" msgid "Time to live for records at zone apex" msgstr "" -#: ipaserver/plugins/dns.py:2495 +#: ipaserver/plugins/dns.py:2502 msgid "BIND update policy" msgstr "" @@ -3294,9 +3292,9 @@ msgstr "" msgid "Add new DNS resource record." msgstr "" -#: ipaserver/plugins/realmdomains.py:151 ipaserver/plugins/service.py:628 -#: ipaserver/plugins/permission.py:1061 ipaserver/plugins/host.py:667 -#: ipaserver/plugins/dns.py:2881 ipaserver/plugins/dns.py:3569 +#: ipaserver/plugins/realmdomains.py:151 ipaserver/plugins/host.py:667 +#: ipaserver/plugins/service.py:628 ipaserver/plugins/permission.py:1061 +#: ipaserver/plugins/dns.py:2888 ipaserver/plugins/dns.py:3576 msgid "Force" msgstr "" @@ -3348,7 +3346,7 @@ msgstr "" msgid "Enable DNS Zone." msgstr "" -#: ipaserver/plugins/dns.py:2920 +#: ipaserver/plugins/dns.py:2927 msgid "Search for DNS zones (SOA records)." msgstr "" @@ -3421,8 +3419,8 @@ msgid "" " ipa hbacrule-del allow_server\n" msgstr "" -#: ipaserver/plugins/sudorule.py:233 ipaserver/plugins/certmap.py:273 -#: ipaserver/plugins/selinuxusermap.py:239 ipaserver/plugins/hbacrule.py:207 +#: ipaserver/plugins/certmap.py:273 ipaserver/plugins/selinuxusermap.py:239 +#: ipaserver/plugins/sudorule.py:233 ipaserver/plugins/hbacrule.py:207 msgid "Rule name" msgstr "" @@ -3434,25 +3432,24 @@ msgstr "" msgid "Rule type (allow)" msgstr "" -#: ipaserver/plugins/sudorule.py:246 ipaserver/plugins/caacl.py:195 #: ipaserver/plugins/netgroup.py:227 ipaserver/plugins/selinuxusermap.py:253 -#: ipaserver/plugins/hbacrule.py:223 +#: ipaserver/plugins/sudorule.py:246 ipaserver/plugins/hbacrule.py:223 msgid "User category" msgstr "" -#: ipaserver/plugins/sudorule.py:247 ipaserver/plugins/netgroup.py:228 -#: ipaserver/plugins/selinuxusermap.py:254 ipaserver/plugins/hbacrule.py:224 +#: ipaserver/plugins/netgroup.py:228 ipaserver/plugins/selinuxusermap.py:254 +#: ipaserver/plugins/sudorule.py:247 ipaserver/plugins/hbacrule.py:224 msgid "User category the rule applies to" msgstr "" -#: ipaserver/plugins/sudorule.py:252 ipaserver/plugins/caacl.py:201 -#: ipaserver/plugins/netgroup.py:233 ipaserver/plugins/selinuxusermap.py:259 +#: ipaserver/plugins/caacl.py:201 ipaserver/plugins/netgroup.py:233 +#: ipaserver/plugins/selinuxusermap.py:259 ipaserver/plugins/sudorule.py:252 #: ipaserver/plugins/hbacrule.py:229 msgid "Host category" msgstr "" -#: ipaserver/plugins/sudorule.py:253 ipaserver/plugins/netgroup.py:234 -#: ipaserver/plugins/selinuxusermap.py:260 ipaserver/plugins/hbacrule.py:230 +#: ipaserver/plugins/netgroup.py:234 ipaserver/plugins/selinuxusermap.py:260 +#: ipaserver/plugins/sudorule.py:253 ipaserver/plugins/hbacrule.py:230 msgid "Host category the rule applies to" msgstr "" @@ -3464,41 +3461,41 @@ msgstr "" msgid "Service category the rule applies to" msgstr "" -#: ipaserver/plugins/sudorule.py:241 ipaserver/plugins/certmap.py:310 -#: ipaserver/plugins/internal.py:1915 ipaserver/plugins/caacl.py:178 -#: ipaserver/plugins/selinuxusermap.py:268 ipaserver/plugins/hbacrule.py:256 +#: ipaserver/plugins/internal.py:1916 ipaserver/plugins/caacl.py:178 +#: ipaserver/plugins/certmap.py:310 ipaserver/plugins/selinuxusermap.py:268 +#: ipaserver/plugins/sudorule.py:241 ipaserver/plugins/hbacrule.py:256 msgid "Enabled" msgstr "" -#: ipaserver/plugins/sudorule.py:282 ipaserver/plugins/internal.py:1189 -#: ipaserver/plugins/caacl.py:220 ipaserver/plugins/user.py:160 -#: ipaserver/plugins/automember.py:697 ipaserver/plugins/selinuxusermap.py:272 -#: ipaserver/plugins/baseuser.py:196 ipaserver/plugins/hbacrule.py:260 +#: ipaserver/plugins/internal.py:1189 ipaserver/plugins/caacl.py:220 +#: ipaserver/plugins/user.py:160 ipaserver/plugins/selinuxusermap.py:272 +#: ipaserver/plugins/sudorule.py:282 ipaserver/plugins/automember.py:697 +#: ipaserver/plugins/hbacrule.py:260 ipaserver/plugins/baseuser.py:196 msgid "Users" msgstr "" -#: ipaserver/plugins/sudorule.py:286 ipaserver/plugins/internal.py:878 -#: ipaserver/plugins/internal.py:1188 ipaserver/plugins/group.py:327 -#: ipaserver/plugins/caacl.py:224 ipaserver/plugins/selinuxusermap.py:276 +#: ipaserver/plugins/internal.py:878 ipaserver/plugins/internal.py:1188 +#: ipaserver/plugins/caacl.py:224 ipaserver/plugins/group.py:327 +#: ipaserver/plugins/selinuxusermap.py:276 ipaserver/plugins/sudorule.py:286 #: ipaserver/plugins/hbacrule.py:264 msgid "User Groups" msgstr "" -#: ipaserver/plugins/sudorule.py:295 ipaserver/plugins/internal.py:1163 -#: ipaserver/plugins/caacl.py:228 ipaserver/plugins/host.py:456 -#: ipaserver/plugins/automember.py:702 ipaserver/plugins/selinuxusermap.py:280 +#: ipaserver/plugins/internal.py:1163 ipaserver/plugins/host.py:456 +#: ipaserver/plugins/caacl.py:228 ipaserver/plugins/selinuxusermap.py:280 +#: ipaserver/plugins/sudorule.py:295 ipaserver/plugins/automember.py:702 #: ipaserver/plugins/hbacrule.py:268 msgid "Hosts" msgstr "" -#: ipaserver/plugins/sudorule.py:299 ipaserver/plugins/hostgroup.py:178 #: ipaserver/plugins/internal.py:1072 ipaserver/plugins/internal.py:1162 -#: ipaserver/plugins/caacl.py:232 ipaserver/plugins/selinuxusermap.py:284 +#: ipaserver/plugins/hostgroup.py:178 ipaserver/plugins/caacl.py:232 +#: ipaserver/plugins/selinuxusermap.py:284 ipaserver/plugins/sudorule.py:299 #: ipaserver/plugins/hbacrule.py:272 msgid "Host Groups" msgstr "" -#: ipaserver/plugins/service.py:466 ipaserver/plugins/internal.py:955 +#: ipaserver/plugins/internal.py:955 ipaserver/plugins/service.py:466 #: ipaserver/plugins/caacl.py:236 msgid "Services" msgstr "" @@ -3534,9 +3531,9 @@ msgstr "" msgid "host groups to add" msgstr "" -#: ipaserver/plugins/privilege.py:226 ipaserver/plugins/privilege.py:257 -#: ipaserver/plugins/role.py:231 ipaserver/plugins/role.py:255 -#: ipaserver/plugins/baseldap.py:1758 ipaserver/plugins/baseldap.py:2245 +#: ipaserver/plugins/role.py:255 ipaserver/plugins/privilege.py:226 +#: ipaserver/plugins/privilege.py:257 ipaserver/plugins/baseldap.py:1758 +#: ipaserver/plugins/baseldap.py:2245 msgid "Members that could not be added" msgstr "" @@ -3825,7 +3822,7 @@ msgid "" " ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" -#: ipaserver/plugins/host.py:462 +#: ipaserver/plugins/service.py:697 msgid "Host name" msgstr "" @@ -3866,10 +3863,10 @@ msgstr "" msgid "Random password" msgstr "" +#: ipaserver/plugins/internal.py:638 ipaserver/plugins/internal.py:722 +#: ipaserver/plugins/ca.py:112 ipaserver/plugins/host.py:508 #: ipaserver/plugins/service.py:492 ipaserver/plugins/cert.py:353 -#: ipaserver/plugins/certmap.py:605 ipaserver/plugins/internal.py:638 -#: ipaserver/plugins/internal.py:722 ipaserver/plugins/idviews.py:1055 -#: ipaserver/plugins/host.py:508 ipaserver/plugins/ca.py:112 +#: ipaserver/plugins/certmap.py:605 ipaserver/plugins/idviews.py:1055 #: ipaserver/plugins/baseuser.py:398 ipaserver/plugins/baseuser.py:840 msgid "Certificate" msgstr "" @@ -3877,7 +3874,7 @@ msgstr "" msgid "Base-64 encoded server certificate" msgstr "" -#: ipaserver/plugins/host.py:550 ipaserver/plugins/baseuser.py:249 +#: ipaserver/plugins/service.py:474 ipaserver/plugins/baseuser.py:249 msgid "Principal name" msgstr "" @@ -3887,7 +3884,7 @@ msgstr "" msgid "Hardware MAC address(es) on this host" msgstr "" -#: ipaserver/plugins/host.py:571 ipaserver/plugins/baseuser.py:348 +#: ipaserver/plugins/idviews.py:1049 ipaserver/plugins/baseuser.py:348 msgid "SSH public key" msgstr "" @@ -3952,7 +3949,7 @@ msgstr "" msgid "Indirect Member of HBAC rule" msgstr "" -#: ipaserver/plugins/host.py:200 +#: ipaserver/plugins/service.py:128 msgid "Keytab" msgstr "" @@ -3962,35 +3959,35 @@ msgstr "" msgid "Managing" msgstr "" -#: ipaserver/plugins/service.py:134 ipaserver/plugins/host.py:212 +#: ipaserver/plugins/service.py:134 msgid "Users allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:137 ipaserver/plugins/host.py:215 +#: ipaserver/plugins/service.py:137 msgid "Groups allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:140 ipaserver/plugins/host.py:218 +#: ipaserver/plugins/service.py:140 msgid "Hosts allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:143 ipaserver/plugins/host.py:221 +#: ipaserver/plugins/service.py:143 msgid "Host Groups allowed to retrieve keytab" msgstr "" -#: ipaserver/plugins/service.py:146 ipaserver/plugins/host.py:224 +#: ipaserver/plugins/service.py:146 msgid "Users allowed to create keytab" msgstr "" -#: ipaserver/plugins/service.py:149 ipaserver/plugins/host.py:227 +#: ipaserver/plugins/service.py:149 msgid "Groups allowed to create keytab" msgstr "" -#: ipaserver/plugins/service.py:152 ipaserver/plugins/host.py:230 +#: ipaserver/plugins/service.py:152 msgid "Hosts allowed to create keytab" msgstr "" -#: ipaserver/plugins/service.py:155 ipaserver/plugins/host.py:233 +#: ipaserver/plugins/service.py:155 msgid "Host Groups allowed to create keytab" msgstr "" @@ -4088,8 +4085,7 @@ msgstr "" msgid "Search for hosts without these member of sudo rules." msgstr "" -#: ipaserver/plugins/sudorule.py:433 ipaserver/plugins/cert.py:1026 -#: ipaserver/plugins/user.py:162 +#: ipaserver/plugins/user.py:162 ipaserver/plugins/sudorule.py:433 msgid "user" msgstr "" @@ -4099,8 +4095,7 @@ msgstr "" msgid "Search for hosts without these enrolled by users." msgstr "" -#: ipaserver/plugins/sudorule.py:438 ipaserver/plugins/cert.py:1028 -#: ipaserver/plugins/host.py:279 +#: ipaserver/plugins/cert.py:1028 ipaserver/plugins/sudorule.py:438 msgid "host" msgstr "" @@ -4131,8 +4126,7 @@ msgstr "" msgid "Display information about a host." msgstr "" -#: ipaserver/plugins/service.py:958 ipaserver/plugins/host.py:1135 -#: ipaserver/plugins/user.py:899 +#: ipaserver/plugins/service.py:958 ipaserver/plugins/user.py:904 msgid "file to store certificate in" msgstr "" @@ -4376,8 +4370,8 @@ msgid "" "hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" -#: ipaserver/plugins/sudorule.py:438 ipaserver/plugins/idviews.py:453 -#: ipaserver/plugins/idviews.py:496 ipaserver/plugins/host.py:280 +#: ipaserver/plugins/idviews.py:453 ipaserver/plugins/idviews.py:496 +#: ipaserver/plugins/sudorule.py:438 msgid "hosts" msgstr "" @@ -4466,7 +4460,7 @@ msgid "" "Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" -#: ipaserver/plugins/internal.py:1986 +#: ipaserver/plugins/internal.py:1987 msgid "Dict of I18N messages" msgstr "" @@ -4558,7 +4552,7 @@ msgid "" " ipa krbtpolicy-mod admin --maxlife=3600\n" msgstr "" -#: ipaserver/plugins/hbactest.py:270 ipaserver/plugins/krbtpolicy.py:134 +#: ipaserver/plugins/krbtpolicy.py:134 ipaserver/plugins/passwd.py:94 msgid "User name" msgstr "" @@ -5132,15 +5126,16 @@ msgstr "" msgid "Set a user's password." msgstr "" -#: ipaserver/plugins/internal.py:1678 +#: ipaserver/plugins/internal.py:1679 ipaserver/plugins/passwd.py:101 msgid "New Password" msgstr "" -#: ipaserver/plugins/internal.py:1672 +#: ipaserver/plugins/internal.py:1673 ipaserver/plugins/passwd.py:104 msgid "Current Password" msgstr "" -#: ipaserver/plugins/internal.py:188 ipaserver/plugins/internal.py:1680 +#: ipaserver/plugins/internal.py:188 ipaserver/plugins/internal.py:1681 +#: ipaserver/plugins/passwd.py:113 msgid "OTP" msgstr "" @@ -5578,7 +5573,7 @@ msgid "" " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" -#: ipaserver/plugins/pwpolicy.py:303 ipaserver/plugins/internal.py:1633 +#: ipaserver/plugins/pwpolicy.py:303 ipaserver/plugins/internal.py:1634 msgid "Group" msgstr "" @@ -5681,7 +5676,7 @@ msgid "Display information about password policy." msgstr "" #: ipaserver/plugins/pwpolicy.py:621 ipaserver/plugins/internal.py:1187 -#: ipaserver/plugins/internal.py:1298 ipaserver/plugins/internal.py:1667 +#: ipaserver/plugins/internal.py:1299 ipaserver/plugins/internal.py:1668 #: ipaserver/plugins/user.py:161 ipaserver/plugins/baseuser.py:197 msgid "User" msgstr "" @@ -5726,7 +5721,7 @@ msgstr "" msgid "A description of this RADIUS proxy server" msgstr "" -#: ipaserver/plugins/radiusproxy.py:122 ipaserver/plugins/user.py:1135 +#: ipaserver/plugins/radiusproxy.py:122 ipaserver/plugins/user.py:1140 msgid "Server" msgstr "" @@ -5811,8 +5806,8 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" -#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/certmap.py:566 -#: ipaserver/plugins/internal.py:714 ipaserver/plugins/internal.py:1519 +#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/internal.py:714 +#: ipaserver/plugins/internal.py:1520 ipaserver/plugins/certmap.py:566 #: ipaserver/plugins/trust.py:1245 msgid "Domain" msgstr "" @@ -6073,11 +6068,11 @@ msgstr "" msgid "Create a new SELinux User Map." msgstr "" -#: ipaserver/plugins/selinuxusermap.py:582 +#: ipaserver/plugins/selinuxusermap.py:590 msgid "Add target hosts and hostgroups to an SELinux User Map rule." msgstr "" -#: ipaserver/plugins/selinuxusermap.py:549 +#: ipaserver/plugins/selinuxusermap.py:557 msgid "Add users and groups to an SELinux User Map rule." msgstr "" @@ -6085,11 +6080,11 @@ msgstr "" msgid "Delete a SELinux User Map." msgstr "" -#: ipaserver/plugins/selinuxusermap.py:519 +#: ipaserver/plugins/selinuxusermap.py:527 msgid "Disable an SELinux User Map rule." msgstr "" -#: ipaserver/plugins/selinuxusermap.py:489 +#: ipaserver/plugins/selinuxusermap.py:497 msgid "Enable an SELinux User Map rule." msgstr "" @@ -6101,15 +6096,15 @@ msgstr "" msgid "Modify a SELinux User Map." msgstr "" -#: ipaserver/plugins/selinuxusermap.py:606 +#: ipaserver/plugins/selinuxusermap.py:614 msgid "Remove target hosts and hostgroups from an SELinux User Map rule." msgstr "" -#: ipaserver/plugins/selinuxusermap.py:573 +#: ipaserver/plugins/selinuxusermap.py:581 msgid "Remove users and groups from an SELinux User Map rule." msgstr "" -#: ipaserver/plugins/selinuxusermap.py:478 +#: ipaserver/plugins/selinuxusermap.py:486 msgid "Display the properties of a SELinux User Map rule." msgstr "" @@ -6941,7 +6936,7 @@ msgstr "" msgid "Group description" msgstr "" -#: ipaserver/plugins/sudocmdgroup.py:134 ipaserver/plugins/internal.py:1385 +#: ipaserver/plugins/internal.py:1386 ipaserver/plugins/sudocmdgroup.py:134 msgid "Commands" msgstr "" @@ -7099,7 +7094,7 @@ msgstr "" msgid "Job Title" msgstr "" -#: ipaserver/plugins/otptoken.py:183 +#: ipaserver/plugins/baseuser.py:341 msgid "Manager" msgstr "" @@ -7263,229 +7258,6 @@ msgid "" " " msgstr "" -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/automember.py:258 -msgid "A description of this auto member rule" -msgstr "" - -#: ipaserver/plugins/automember.py:262 ipaserver/plugins/automember.py:585 -msgid "Default (fallback) Group" -msgstr "" - -#: ipaserver/plugins/automember.py:263 -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:249 ipaserver/plugins/automember.py:250 -msgid "Automember Rule" -msgstr "" - -#: ipaserver/plugins/automember.py:184 -msgid "Grouping Type" -msgstr "" - -#: ipaserver/plugins/automember.py:185 -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:160 ipaserver/plugins/automember.py:161 -msgid "Inclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:167 ipaserver/plugins/automember.py:168 -msgid "Exclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:176 -msgid "Attribute Key" -msgstr "" - -#: ipaserver/plugins/automember.py:177 -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -#: ipaserver/plugins/automember.py:357 -msgid "Conditions that could not be added" -msgstr "" - -#: ipaserver/plugins/automember.py:361 -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#: ipaserver/plugins/automember.py:586 -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:683 -msgid "Rebuild auto membership." -msgstr "" - -#: ipaserver/plugins/automember.py:693 -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -#: ipaserver/plugins/automember.py:698 -msgid "Rebuild membership for specified users" -msgstr "" - -#: ipaserver/plugins/automember.py:703 -msgid "Rebuild membership for specified hosts" -msgstr "" - -#: ipaserver/plugins/automember.py:708 -msgid "No wait" -msgstr "" - -#: ipaserver/plugins/automember.py:709 -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:441 -msgid "Conditions that could not be removed" -msgstr "" - -#: ipaserver/plugins/automember.py:445 -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - msgid "" "\n" "IPA certificate operations\n" @@ -7862,251 +7634,6 @@ msgstr "" msgid "Display information about a named group." msgstr "" -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -#: ipaserver/plugins/hbactest.py:256 -msgid "Simulate use of Host-based access controls" -msgstr "" - -#: ipaserver/plugins/hbactest.py:281 -msgid "Target host" -msgstr "" - -#: ipaserver/plugins/hbactest.py:289 -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -#: ipaserver/plugins/hbactest.py:293 -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -#: ipaserver/plugins/hbactest.py:297 -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -#: ipaserver/plugins/hbactest.py:301 -msgid "Include all disabled IPA rules into test" -msgstr "" - -#: ipaserver/plugins/hbactest.py:305 -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -#: ipaserver/plugins/hbactest.py:260 -msgid "Warning" -msgstr "" - -#: ipaserver/plugins/hbactest.py:261 -msgid "Matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:262 -msgid "Not matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:263 -msgid "Non-existent or invalid rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:264 -msgid "Result of simulation" -msgstr "" - msgid "" "\n" "Cross-realm trusts\n" @@ -8207,12 +7734,12 @@ msgid "" "\"\n" msgstr "" -#: ipaserver/plugins/internal.py:1522 ipaserver/plugins/trust.py:541 +#: ipaserver/plugins/internal.py:1523 ipaserver/plugins/trust.py:541 #: ipaserver/plugins/trust.py:1585 msgid "Domain NetBIOS name" msgstr "" -#: ipaserver/plugins/internal.py:1523 ipaserver/plugins/trust.py:545 +#: ipaserver/plugins/internal.py:1524 ipaserver/plugins/trust.py:545 #: ipaserver/plugins/trust.py:1588 msgid "Domain Security Identifier" msgstr "" @@ -8293,8 +7820,8 @@ msgstr "" msgid "Size of the ID range reserved for the trusted domain" msgstr "" -#: ipaserver/plugins/internal.py:1245 ipaserver/plugins/trust.py:710 -#: ipaserver/plugins/idrange.py:244 +#: ipaserver/plugins/internal.py:1246 ipaserver/plugins/idrange.py:248 +#: ipaserver/plugins/trust.py:710 msgid "Range type" msgstr "" @@ -8359,238 +7886,6 @@ msgstr "" msgid "Modify trustdomain of the trust" msgstr "" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:214 -msgid "Range name" -msgstr "" - -#: ipaserver/plugins/idrange.py:219 -msgid "First Posix ID of the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:223 -msgid "Number of IDs in the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:227 -msgid "First RID of the corresponding RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:231 -msgid "First RID of the secondary RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:236 ipaserver/plugins/idrange.py:626 -msgid "Domain SID of the trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:241 ipaserver/plugins/idrange.py:634 -msgid "Name of the trusted domain" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#: ipaserver/plugins/idrange.py:527 -msgid "Delete an ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:575 -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:598 -msgid "Display information about a range." -msgstr "" - msgid "" "\n" "OTP Tokens\n" @@ -8640,7 +7935,7 @@ msgstr "" msgid "Assigned manager of the token (default: self)" msgstr "" -#: ipaserver/plugins/internal.py:1913 ipaserver/plugins/otptoken.py:189 +#: ipaserver/plugins/internal.py:1914 ipaserver/plugins/otptoken.py:189 msgid "Disabled" msgstr "" @@ -9025,12 +8320,712 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" -#: ipaserver/plugins/serverrole.py:124 ipaserver/plugins/cert.py:1569 +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#: ipaserver/plugins/automember.py:258 +msgid "A description of this auto member rule" +msgstr "" + +#: ipaserver/plugins/automember.py:262 ipaserver/plugins/automember.py:585 +msgid "Default (fallback) Group" +msgstr "" + +#: ipaserver/plugins/automember.py:263 +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:249 ipaserver/plugins/automember.py:250 +msgid "Automember Rule" +msgstr "" + +#: ipaserver/plugins/automember.py:184 +msgid "Grouping Type" +msgstr "" + +#: ipaserver/plugins/automember.py:185 +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:160 ipaserver/plugins/automember.py:161 +msgid "Inclusive Regex" +msgstr "" + +#: ipaserver/plugins/automember.py:167 ipaserver/plugins/automember.py:168 +msgid "Exclusive Regex" +msgstr "" + +#: ipaserver/plugins/automember.py:176 +msgid "Attribute Key" +msgstr "" + +#: ipaserver/plugins/automember.py:177 +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +#: ipaserver/plugins/automember.py:357 +msgid "Conditions that could not be added" +msgstr "" + +#: ipaserver/plugins/automember.py:361 +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#: ipaserver/plugins/automember.py:586 +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:683 +msgid "Rebuild auto membership." +msgstr "" + +#: ipaserver/plugins/automember.py:693 +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +#: ipaserver/plugins/automember.py:698 +msgid "Rebuild membership for specified users" +msgstr "" + +#: ipaserver/plugins/automember.py:703 +msgid "Rebuild membership for specified hosts" +msgstr "" + +#: ipaserver/plugins/automember.py:708 +msgid "No wait" +msgstr "" + +#: ipaserver/plugins/automember.py:709 +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +#: ipaserver/plugins/automember.py:441 +msgid "Conditions that could not be removed" +msgstr "" + +#: ipaserver/plugins/automember.py:445 +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +#: ipaserver/plugins/hbactest.py:256 +msgid "Simulate use of Host-based access controls" +msgstr "" + +#: ipaserver/plugins/hbactest.py:281 +msgid "Target host" +msgstr "" + +#: ipaserver/plugins/hbactest.py:289 +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +#: ipaserver/plugins/hbactest.py:293 +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +#: ipaserver/plugins/hbactest.py:297 +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +#: ipaserver/plugins/hbactest.py:301 +msgid "Include all disabled IPA rules into test" +msgstr "" + +#: ipaserver/plugins/hbactest.py:305 +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +#: ipaserver/plugins/hbactest.py:260 +msgid "Warning" +msgstr "" + +#: ipaserver/plugins/hbactest.py:261 +msgid "Matched rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:262 +msgid "Not matched rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:263 +msgid "Non-existent or invalid rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:264 +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:218 +msgid "Range name" +msgstr "" + +#: ipaserver/plugins/idrange.py:223 +msgid "First Posix ID of the range" +msgstr "" + +#: ipaserver/plugins/idrange.py:227 +msgid "Number of IDs in the range" +msgstr "" + +#: ipaserver/plugins/idrange.py:231 +msgid "First RID of the corresponding RID range" +msgstr "" + +#: ipaserver/plugins/idrange.py:235 +msgid "First RID of the secondary RID range" +msgstr "" + +#: ipaserver/plugins/idrange.py:240 ipaserver/plugins/idrange.py:650 +msgid "Domain SID of the trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:245 ipaserver/plugins/idrange.py:658 +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#: ipaserver/plugins/idrange.py:551 +msgid "Delete an ID range." +msgstr "" + +#: ipaserver/plugins/idrange.py:599 +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +#: ipaserver/plugins/idrange.py:622 +msgid "Display information about a range." +msgstr "" + +#: ipaserver/plugins/serverrole.py:124 ipaserver/plugins/cert.py:1575 #: ipaserver/plugins/pkinit.py:72 ipaserver/plugins/baseldap.py:1968 msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" -#: ipaserver/plugins/serverrole.py:132 ipaserver/plugins/cert.py:1574 +#: ipaserver/plugins/serverrole.py:132 ipaserver/plugins/cert.py:1580 #: ipaserver/plugins/pkinit.py:80 ipaserver/plugins/baseldap.py:1975 msgid "Maximum number of entries returned (0 is unlimited)" msgstr "" @@ -9170,8 +9165,8 @@ msgstr "" msgid "Change current Domain Level." msgstr "" -#: ipaserver/plugins/internal.py:791 ipaserver/plugins/internal.py:792 -#: ipaserver/plugins/domainlevel.py:124 +#: ipaserver/plugins/domainlevel.py:124 ipaserver/plugins/internal.py:791 +#: ipaserver/plugins/internal.py:792 msgid "Domain Level" msgstr "" @@ -9251,12 +9246,12 @@ msgid "" msgstr "" #: ipaserver/plugins/serverrole.py:58 ipaserver/plugins/dnsserver.py:112 -#: ipaserver/plugins/pkinit.py:47 ipaserver/plugins/server.py:103 +#: ipaserver/plugins/server.py:103 ipaserver/plugins/pkinit.py:47 msgid "Server name" msgstr "" -#: ipaserver/plugins/serverrole.py:59 ipaserver/plugins/pkinit.py:48 -#: ipaserver/plugins/server.py:104 +#: ipaserver/plugins/serverrole.py:59 ipaserver/plugins/server.py:104 +#: ipaserver/plugins/pkinit.py:48 msgid "IPA server hostname" msgstr "" @@ -9708,7 +9703,7 @@ msgid "" " " msgstr "" -#: ipaserver/plugins/user.py:1131 +#: ipaserver/plugins/user.py:1136 msgid "Preserved user" msgstr "" @@ -10020,118 +10015,6 @@ msgstr "" msgid "Certificate Profile to use" msgstr "" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -#: ipaserver/plugins/certprofile.py:123 -msgid "Profile ID for referring to this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:132 -msgid "Profile description" -msgstr "" - -#: ipaserver/plugins/certprofile.py:133 -msgid "Brief description of this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:138 -msgid "Store issued certificates" -msgstr "" - -#: ipaserver/plugins/certprofile.py:139 -msgid "Whether to store certs issued using this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:281 -msgid "Delete a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:188 -msgid "Search for Certificate Profiles." -msgstr "" - -#: ipaserver/plugins/certprofile.py:221 -msgid "Import a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:226 -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#: ipaserver/plugins/certprofile.py:304 -msgid "Modify Certificate Profile configuration." -msgstr "" - -#: ipaserver/plugins/certprofile.py:310 -msgid "File containing profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:200 -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:204 -msgid "Write profile configuration to file" -msgstr "" - -#: ipaserver/plugins/otptoken.py:469 -msgid "Remove users that can manage this token." -msgstr "" - #: ipaserver/dcerpc_common.py:22 msgid "Two-way trust" msgstr "" @@ -10352,6 +10235,118 @@ msgid "" " " msgstr "" +#: ipaserver/plugins/otptoken.py:469 +msgid "Remove users that can manage this token." +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +#: ipaserver/plugins/certprofile.py:123 +msgid "Profile ID for referring to this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:132 +msgid "Profile description" +msgstr "" + +#: ipaserver/plugins/certprofile.py:133 +msgid "Brief description of this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:138 +msgid "Store issued certificates" +msgstr "" + +#: ipaserver/plugins/certprofile.py:139 +msgid "Whether to store certs issued using this profile" +msgstr "" + +#: ipaserver/plugins/certprofile.py:281 +msgid "Delete a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:188 +msgid "Search for Certificate Profiles." +msgstr "" + +#: ipaserver/plugins/certprofile.py:221 +msgid "Import a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:226 +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#: ipaserver/plugins/certprofile.py:304 +msgid "Modify Certificate Profile configuration." +msgstr "" + +#: ipaserver/plugins/certprofile.py:310 +msgid "File containing profile configuration" +msgstr "" + +#: ipaserver/plugins/certprofile.py:200 +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#: ipaserver/plugins/certprofile.py:204 +msgid "Write profile configuration to file" +msgstr "" + msgid "Resolve a host name in DNS. (Deprecated)" msgstr "" @@ -10661,11 +10656,11 @@ msgstr "" msgid "Check connection to remote IPA server." msgstr "" -#: ipaserver/plugins/server.py:903 +#: ipaserver/plugins/trust.py:1848 msgid "Remote server name" msgstr "" -#: ipaserver/plugins/server.py:904 +#: ipaserver/plugins/trust.py:1849 msgid "Remote IPA server hostname" msgstr "" @@ -12649,335 +12644,17 @@ msgstr "" msgid "No file to read" msgstr "" -#: ipalib/plugable.py:540 +#: ipalib/frontend.py:425 +msgid "Results are truncated, try a more specific search" +msgstr "" + +#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 #, python-format -msgid "%(filename)s: file not found" +msgid "Unknown option: %(option)s" msgstr "" -#: ipalib/plugable.py:613 -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -#: ipalib/util.py:214 -msgid "Filename is empty" -msgstr "" - -#: ipalib/util.py:218 -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -#: ipalib/util.py:415 ipalib/util.py:947 -msgid "empty DNS label" -msgstr "" - -#: ipalib/util.py:418 -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#: ipalib/util.py:423 -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -#: ipalib/util.py:439 -msgid "single label {}s are not supported" -msgstr "" - -#: ipalib/util.py:449 -msgid "too many '@' characters" -msgstr "" - -#: ipalib/util.py:478 -msgid "cannot be longer that {} characters" -msgstr "" - -#: ipalib/util.py:485 -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -#: ipalib/util.py:489 -msgid "not fully qualified" -msgstr "" - -#: ipalib/util.py:502 ipalib/util.py:511 -msgid "invalid SSH public key" -msgstr "" - -#: ipalib/util.py:514 -msgid "options are not allowed" -msgstr "" - -#: ipalib/util.py:750 -msgid "invalid hostmask" -msgstr "" - -#: ipalib/util.py:764 -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#: ipalib/util.py:768 -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#: ipalib/util.py:772 -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#: ipalib/util.py:777 -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -#: ipalib/util.py:945 -msgid "invalid escape code in domain name" -msgstr "" - -#: ipalib/util.py:949 -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -#: ipalib/util.py:951 -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#: ipalib/util.py:953 -msgid "invalid domain name" -msgstr "" - -#: ipalib/util.py:966 -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#: ipalib/util.py:1115 -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#: ipalib/util.py:1127 -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -#: ipalib/util.py:1133 -msgid "invalid IP address format" -msgstr "" - -#: ipalib/util.py:1151 -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -#: ipalib/util.py:1184 -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -#: ipalib/util.py:1271 -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -#: ipalib/messages.py:84 -msgid "Additional instructions:" -msgstr "" - -#: ipalib/messages.py:146 -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -#: ipalib/messages.py:158 -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#: ipalib/messages.py:170 -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#: ipalib/messages.py:180 -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#: ipalib/messages.py:190 -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#: ipalib/messages.py:201 -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#: ipalib/messages.py:211 -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#: ipalib/messages.py:224 -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#: ipalib/messages.py:238 -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#: ipalib/messages.py:251 -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#: ipalib/messages.py:265 -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#: ipalib/messages.py:281 -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -#: ipalib/messages.py:295 -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#: ipalib/messages.py:310 -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#: ipalib/messages.py:323 -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#: ipalib/messages.py:333 -#, python-format -msgid "%(line)s" -msgstr "" - -#: ipalib/messages.py:343 -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#: ipalib/messages.py:353 -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#: ipalib/messages.py:372 -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -#: ipalib/messages.py:386 -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#: ipalib/messages.py:400 -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#: ipalib/messages.py:411 -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -#: ipalib/messages.py:423 -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#: ipalib/messages.py:436 -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#: ipalib/messages.py:448 -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#: ipalib/messages.py:475 -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#: ipalib/messages.py:486 -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#: ipalib/messages.py:496 -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#: ipalib/rpc.py:1114 -msgid "any of the configured servers" -msgstr "" - -#: ipalib/rpc.py:1197 -msgid "Exceeded number of tries to forward a request." +#: ipalib/frontend.py:986 ipaserver/plugins/batch.py:83 +msgid "Client version. Used to determine if server will accept request." msgstr "" #: ipalib/errors.py:296 @@ -13433,171 +13110,335 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -#: ipalib/parameters.py:408 -msgid "incorrect type" +#: ipalib/messages.py:84 +msgid "Additional instructions:" msgstr "" -#: ipalib/parameters.py:411 -msgid "Only one value is allowed" -msgstr "" - -#: ipalib/parameters.py:878 -msgid "this option is deprecated" -msgstr "" - -#: ipalib/parameters.py:996 -msgid "must be True or False" -msgstr "" - -#: ipalib/parameters.py:1094 -msgid "must be an integer" -msgstr "" - -#: ipalib/parameters.py:1144 -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#: ipalib/parameters.py:1156 -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -#: ipalib/parameters.py:1174 -msgid "must be a decimal number" -msgstr "" - -#: ipalib/parameters.py:1220 -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#: ipalib/parameters.py:1232 -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#: ipalib/parameters.py:1242 +#: ipalib/messages.py:146 #, python-format msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" msgstr "" -#: ipalib/parameters.py:1365 +#: ipalib/messages.py:158 +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#: ipalib/messages.py:170 #, python-format -msgid "must match pattern \"%(pattern)s\"" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" msgstr "" -#: ipalib/parameters.py:1385 -msgid "must be binary data" -msgstr "" - -#: ipalib/parameters.py:1404 +#: ipalib/messages.py:180 #, python-format -msgid "must be at least %(minlength)d bytes" +msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "" -#: ipalib/parameters.py:1416 +#: ipalib/messages.py:190 #, python-format -msgid "can be at most %(maxlength)d bytes" +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" -#: ipalib/parameters.py:1428 +#: ipalib/messages.py:201 #, python-format -msgid "must be exactly %(length)d bytes" +msgid "DNS server %(server)s: %(error)s." msgstr "" -#: ipalib/parameters.py:1445 -msgid "must be a certificate" -msgstr "" - -#: ipalib/parameters.py:1481 -msgid "must be a certificate signing request" -msgstr "" - -#: ipalib/parameters.py:1527 +#: ipalib/messages.py:211 #, python-format -msgid "Failure decoding Certificate Signing Request: %s" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" -#: ipalib/parameters.py:1551 -msgid "must be Unicode text" -msgstr "" - -#: ipalib/parameters.py:1582 -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#: ipalib/parameters.py:1592 +#: ipalib/messages.py:224 #, python-format -msgid "must be at least %(minlength)d characters" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." msgstr "" -#: ipalib/parameters.py:1604 +#: ipalib/messages.py:238 #, python-format -msgid "can be at most %(maxlength)d characters" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" -#: ipalib/parameters.py:1616 +#: ipalib/messages.py:251 #, python-format -msgid "must be exactly %(length)d characters" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." msgstr "" -#: ipalib/parameters.py:1638 +#: ipalib/messages.py:265 #, python-format -msgid "The character %(char)r is not allowed." +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" msgstr "" -#: ipalib/parameters.py:1691 +#: ipalib/messages.py:281 #, python-format -msgid "must be '%(value)s'" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." msgstr "" -#: ipalib/parameters.py:1694 +#: ipalib/messages.py:295 +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#: ipalib/messages.py:310 #, python-format -msgid "must be one of %(values)s" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" -#: ipalib/parameters.py:1811 -msgid "must be datetime value" -msgstr "" - -#: ipalib/parameters.py:1829 -msgid "does not match any of accepted formats: " -msgstr "" - -#: ipalib/parameters.py:2012 -msgid "incomplete time value" -msgstr "" - -#: ipalib/parameters.py:2089 -msgid "must be DNS name" -msgstr "" - -#: ipalib/parameters.py:2117 -msgid "must be absolute" -msgstr "" - -#: ipalib/parameters.py:2123 -msgid "must be relative" -msgstr "" - -#: ipalib/parameters.py:2134 -msgid "must be dictionary" -msgstr "" - -#: ipalib/parameters.py:2143 -msgid "must be Kerberos principal" -msgstr "" - -#: ipalib/parameters.py:2159 +#: ipalib/messages.py:323 #, python-format -msgid "Malformed principal: '%(value)s'" +msgid "'%(command)s' is deprecated. %(additional_info)s" msgstr "" -#: ipalib/parameters.py:2168 -msgid "Service principal is required" +#: ipalib/messages.py:333 +#, python-format +msgid "%(line)s" +msgstr "" + +#: ipalib/messages.py:343 +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#: ipalib/messages.py:353 +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#: ipalib/messages.py:372 +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +#: ipalib/messages.py:386 +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#: ipalib/messages.py:400 +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#: ipalib/messages.py:411 +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +#: ipalib/messages.py:423 +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#: ipalib/messages.py:436 +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#: ipalib/messages.py:448 +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#: ipalib/messages.py:475 +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#: ipalib/messages.py:486 +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#: ipalib/messages.py:496 +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#: ipalib/plugable.py:540 +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#: ipalib/plugable.py:613 +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#: ipalib/rpc.py:1114 +msgid "any of the configured servers" +msgstr "" + +#: ipalib/rpc.py:1197 +msgid "Exceeded number of tries to forward a request." +msgstr "" + +#: ipalib/util.py:214 +msgid "Filename is empty" +msgstr "" + +#: ipalib/util.py:218 +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +#: ipalib/util.py:415 ipalib/util.py:947 +msgid "empty DNS label" +msgstr "" + +#: ipalib/util.py:418 +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#: ipalib/util.py:423 +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +#: ipalib/util.py:439 +msgid "single label {}s are not supported" +msgstr "" + +#: ipalib/util.py:449 +msgid "too many '@' characters" +msgstr "" + +#: ipalib/util.py:478 +msgid "cannot be longer that {} characters" +msgstr "" + +#: ipalib/util.py:485 +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +#: ipalib/util.py:489 +msgid "not fully qualified" +msgstr "" + +#: ipalib/util.py:502 ipalib/util.py:511 +msgid "invalid SSH public key" +msgstr "" + +#: ipalib/util.py:514 +msgid "options are not allowed" +msgstr "" + +#: ipalib/util.py:750 +msgid "invalid hostmask" +msgstr "" + +#: ipalib/util.py:764 +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#: ipalib/util.py:768 +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#: ipalib/util.py:772 +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#: ipalib/util.py:777 +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +#: ipalib/util.py:945 +msgid "invalid escape code in domain name" +msgstr "" + +#: ipalib/util.py:949 +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +#: ipalib/util.py:951 +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#: ipalib/util.py:953 +msgid "invalid domain name" +msgstr "" + +#: ipalib/util.py:966 +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#: ipalib/util.py:1115 +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#: ipalib/util.py:1127 +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +#: ipalib/util.py:1133 +msgid "invalid IP address format" +msgstr "" + +#: ipalib/util.py:1151 +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +#: ipalib/util.py:1184 +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +#: ipalib/util.py:1271 +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" #: ipalib/misc.py:22 @@ -13612,20 +13453,174 @@ msgid_plural "%(count)d plugins loaded" msgstr[0] "" msgstr[1] "" -#: ipalib/frontend.py:425 -msgid "Results are truncated, try a more specific search" +#: ipalib/parameters.py:415 +msgid "incorrect type" msgstr "" -#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 +#: ipalib/parameters.py:418 +msgid "Only one value is allowed" +msgstr "" + +#: ipalib/parameters.py:885 +msgid "this option is deprecated" +msgstr "" + +#: ipalib/parameters.py:1003 +msgid "must be True or False" +msgstr "" + +#: ipalib/parameters.py:1101 +msgid "must be an integer" +msgstr "" + +#: ipalib/parameters.py:1167 #, python-format -msgid "Unknown option: %(option)s" +msgid "must be at least %(minvalue)d" msgstr "" -#: ipalib/frontend.py:986 ipaserver/plugins/batch.py:83 -msgid "Client version. Used to determine if server will accept request." +#: ipalib/parameters.py:1179 +#, python-format +msgid "can be at most %(maxvalue)d" msgstr "" -#: ipapython/ipaldap.py:1187 +#: ipalib/parameters.py:1197 +msgid "must be a decimal number" +msgstr "" + +#: ipalib/parameters.py:1243 +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#: ipalib/parameters.py:1255 +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#: ipalib/parameters.py:1265 +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#: ipalib/parameters.py:1388 +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +#: ipalib/parameters.py:1408 +msgid "must be binary data" +msgstr "" + +#: ipalib/parameters.py:1427 +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#: ipalib/parameters.py:1439 +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#: ipalib/parameters.py:1451 +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#: ipalib/parameters.py:1468 +msgid "must be a certificate" +msgstr "" + +#: ipalib/parameters.py:1504 +msgid "must be a certificate signing request" +msgstr "" + +#: ipalib/parameters.py:1550 +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +#: ipalib/parameters.py:1574 +msgid "must be Unicode text" +msgstr "" + +#: ipalib/parameters.py:1605 +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#: ipalib/parameters.py:1615 +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#: ipalib/parameters.py:1627 +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#: ipalib/parameters.py:1639 +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#: ipalib/parameters.py:1661 +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#: ipalib/parameters.py:1714 +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#: ipalib/parameters.py:1717 +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +#: ipalib/parameters.py:1834 +msgid "must be datetime value" +msgstr "" + +#: ipalib/parameters.py:1852 +msgid "does not match any of accepted formats: " +msgstr "" + +#: ipalib/parameters.py:2035 +msgid "incomplete time value" +msgstr "" + +#: ipalib/parameters.py:2112 +msgid "must be DNS name" +msgstr "" + +#: ipalib/parameters.py:2140 +msgid "must be absolute" +msgstr "" + +#: ipalib/parameters.py:2146 +msgid "must be relative" +msgstr "" + +#: ipalib/parameters.py:2157 +msgid "must be dictionary" +msgstr "" + +#: ipalib/parameters.py:2166 +msgid "must be Kerberos principal" +msgstr "" + +#: ipalib/parameters.py:2182 +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +#: ipalib/parameters.py:2191 +msgid "Service principal is required" +msgstr "" + +#: ipapython/ipaldap.py:1189 #, python-format msgid "objectclass %s not found" msgstr "" @@ -13655,13 +13650,13 @@ msgstr "" msgid "Unable to communicate with CMS (status %d)" msgstr "" -#: ipaserver/install/replication.py:1779 ipaserver/install/replication.py:1798 -#, python-format -msgid "Replication agreement for %(hostname)s not found" +#: ipaserver/install/ipa_acme_manage.py:45 ipaserver/plugins/dogtag.py:1211 +msgid "Failed to authenticate to CA REST API" msgstr "" -#: ipaserver/install/ipa_acme_manage.py:45 ipaserver/plugins/dogtag.py:1203 -msgid "Failed to authenticate to CA REST API" +#: ipaserver/install/replication.py:1801 ipaserver/install/replication.py:1820 +#, python-format +msgid "Replication agreement for %(hostname)s not found" msgstr "" #: ipaserver/plugins/otp.py:7 @@ -13778,6 +13773,251 @@ msgstr "" msgid "IPA role name" msgstr "" +#: ipaserver/plugins/domainlevel.py:69 +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +#: ipaserver/plugins/domainlevel.py:112 +msgid "Server does not support domain level functionality" +msgstr "" + +#: ipaserver/plugins/domainlevel.py:147 +msgid "Domain Level cannot be lowered." +msgstr "" + +#: ipaserver/plugins/domainlevel.py:155 +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +#: ipaserver/plugins/hbactest.py:39 ipaserver/plugins/cert.py:64 +msgid "pyhbac is not installed." +msgstr "" + +#: ipaserver/plugins/hbactest.py:45 +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +#: ipaserver/plugins/hbactest.py:384 +msgid "Unresolved rules in --rules" +msgstr "" + +#: ipaserver/plugins/hbactest.py:402 ipaserver/plugins/group.py:629 +#: ipaserver/plugins/group.py:686 +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +#: ipaserver/plugins/hbactest.py:408 ipaserver/plugins/trust.py:345 +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#: ipaserver/plugins/hbactest.py:497 +#, python-format +msgid "Access granted: %s" +msgstr "" + #: ipaserver/plugins/pwpolicy.py:92 msgid "Class of Service object used for linking policies with groups" msgstr "" @@ -13912,7 +14152,7 @@ msgid "Realm domains" msgstr "" #: ipaserver/plugins/realmdomains.py:107 ipaserver/plugins/realmdomains.py:108 -#: ipaserver/plugins/internal.py:1259 +#: ipaserver/plugins/internal.py:1260 msgid "Realm Domains" msgstr "" @@ -13971,193 +14211,4516 @@ msgstr "" msgid "IPA server domain cannot be deleted" msgstr "" -#: ipaserver/plugins/schema.py:30 -msgid "" -"\n" -"API Schema\n" +#: ipaserver/plugins/role.py:143 +msgid "Role" msgstr "" -#: ipaserver/plugins/schema.py:32 -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -#: ipaserver/plugins/schema.py:36 -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -#: ipaserver/plugins/schema.py:39 -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#: ipaserver/plugins/schema.py:54 ipaserver/plugins/trust.py:1418 -#: ipaserver/plugins/ca.py:84 -msgid "Name" -msgstr "" - -#: ipaserver/plugins/schema.py:60 -msgid "Documentation" -msgstr "" - -#: ipaserver/plugins/schema.py:65 -msgid "Exclude from" -msgstr "" - -#: ipaserver/plugins/schema.py:70 -msgid "Include in" -msgstr "" - -#: ipaserver/plugins/schema.py:128 ipaserver/plugins/baseldap.py:1949 +#: ipaserver/plugins/role.py:164 #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" +msgid "Added role \"%(value)s\"" msgstr "" -#: ipaserver/plugins/schema.py:141 -msgid "Help topic" +#: ipaserver/plugins/role.py:172 +#, python-format +msgid "Deleted role \"%(value)s\"" msgstr "" -#: ipaserver/plugins/schema.py:153 ipaserver/plugins/internal.py:730 +#: ipaserver/plugins/role.py:180 +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/role.py:189 +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:24 +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:28 +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +#: ipaserver/plugins/topology.py:33 +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:39 +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +#: ipaserver/plugins/topology.py:43 +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +#: ipaserver/plugins/topology.py:47 +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +#: ipaserver/plugins/topology.py:52 +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +#: ipaserver/plugins/topology.py:55 +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +#: ipaserver/plugins/topology.py:58 +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +#: ipaserver/plugins/topology.py:61 +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +#: ipaserver/plugins/topology.py:64 +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +#: ipaserver/plugins/topology.py:67 +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +#: ipaserver/plugins/topology.py:70 +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +#: ipaserver/plugins/topology.py:73 +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +#: ipaserver/plugins/topology.py:76 +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#: ipaserver/plugins/topology.py:92 +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +#: ipaserver/plugins/topology.py:104 +msgid "segment" +msgstr "" + +#: ipaserver/plugins/topology.py:105 +msgid "segments" +msgstr "" + +#: ipaserver/plugins/topology.py:119 +msgid "Topology Segments" +msgstr "" + +#: ipaserver/plugins/topology.py:120 +msgid "Topology Segment" +msgstr "" + +#: ipaserver/plugins/topology.py:226 +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#: ipaserver/plugins/topology.py:233 +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +#: ipaserver/plugins/topology.py:250 +msgid "left node and right node must not be the same" +msgstr "" + +#: ipaserver/plugins/topology.py:261 +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#: ipaserver/plugins/topology.py:269 +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#: ipaserver/plugins/topology.py:280 +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:289 +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:302 +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:314 +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:329 +#, python-format +msgid "%(value)s" +msgstr "" + +#: ipaserver/plugins/topology.py:365 +msgid "left or right node has to be specified" +msgstr "" + +#: ipaserver/plugins/topology.py:370 +msgid "only one node can be specified" +msgstr "" + +#: ipaserver/plugins/topology.py:374 +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#: ipaserver/plugins/topology.py:377 +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#: ipaserver/plugins/topology.py:408 +msgid "suffixes" +msgstr "" + +#: ipaserver/plugins/topology.py:412 +msgid "Topology suffixes" +msgstr "" + +#: ipaserver/plugins/topology.py:413 +msgid "Topology suffix" +msgstr "" + +#: ipaserver/plugins/topology.py:435 +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/topology.py:446 +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:460 +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:474 +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/topology.py:489 +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#: ipaserver/plugins/internal.py:151 +msgid "Internationalization messages" +msgstr "" + +#: ipaserver/plugins/internal.py:157 +msgid "Your session has expired. Please log in again." +msgstr "" + +#: ipaserver/plugins/internal.py:161 ipaserver/plugins/internal.py:205 +msgid "Apply" +msgstr "" + +#: ipaserver/plugins/internal.py:162 +msgid "Rebuild auto membership" +msgstr "" + +#: ipaserver/plugins/internal.py:163 +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +#: ipaserver/plugins/internal.py:164 ipaserver/plugins/automember.py:799 +msgid "Automember rebuild membership task completed" +msgstr "" + +#: ipaserver/plugins/internal.py:165 +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#: ipaserver/plugins/internal.py:166 +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:167 +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:168 +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:169 +msgid "Actions" +msgstr "" + +#: ipaserver/plugins/internal.py:172 ipaserver/plugins/internal.py:200 +#: ipaserver/plugins/internal.py:262 +msgid "Add" +msgstr "" + +#: ipaserver/plugins/internal.py:173 +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +#: ipaserver/plugins/internal.py:174 +msgid "Direct Membership" +msgstr "" + +#: ipaserver/plugins/internal.py:175 +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +#: ipaserver/plugins/internal.py:176 +msgid "Indirect Membership" +msgstr "" + +#: ipaserver/plugins/internal.py:177 +msgid "No entries." +msgstr "" + +#: ipaserver/plugins/internal.py:178 +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +#: ipaserver/plugins/internal.py:179 ipaserver/plugins/internal.py:277 +msgid "Remove" +msgstr "" + +#: ipaserver/plugins/internal.py:180 +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +#: ipaserver/plugins/internal.py:181 +msgid "Show Results" +msgstr "" + +#: ipaserver/plugins/internal.py:184 +msgid "Authentication indicators" +msgstr "" + +#: ipaserver/plugins/internal.py:185 +msgid "Authentication indicator" +msgstr "" + +#: ipaserver/plugins/internal.py:186 +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +#: ipaserver/plugins/internal.py:187 +msgid "Add Custom Authentication Indicator" +msgstr "" + +#: ipaserver/plugins/internal.py:189 +msgid "Two factor authentication (password + OTP)" +msgstr "" + +#: ipaserver/plugins/internal.py:191 +msgid "RADIUS" +msgstr "" + +#: ipaserver/plugins/internal.py:192 ipaserver/plugins/pkinit.py:41 +msgid "PKINIT" +msgstr "" + +#: ipaserver/plugins/internal.py:193 +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +#: ipaserver/plugins/internal.py:194 +msgid "Disable per-user override" +msgstr "" + +#: ipaserver/plugins/internal.py:195 +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +#: ipaserver/plugins/internal.py:198 ipaserver/plugins/internal.py:272 +#: ipaserver/plugins/internal.py:1709 +msgid "About" +msgstr "" + +#: ipaserver/plugins/internal.py:199 +msgid "Activate" +msgstr "" + +#: ipaserver/plugins/internal.py:201 +msgid "Add and Add Another" +msgstr "" + +#: ipaserver/plugins/internal.py:202 +msgid "Add and Close" +msgstr "" + +#: ipaserver/plugins/internal.py:203 +msgid "Add and Edit" +msgstr "" + +#: ipaserver/plugins/internal.py:204 +msgid "Add Many" +msgstr "" + +#: ipaserver/plugins/internal.py:206 +msgid "Back" +msgstr "" + +#: ipaserver/plugins/internal.py:207 +msgid "Cancel" +msgstr "" + +#: ipaserver/plugins/internal.py:208 +msgid "Clear" +msgstr "" + +#: ipaserver/plugins/internal.py:209 +msgid "Clear all fields on the page." +msgstr "" + +#: ipaserver/plugins/internal.py:210 +msgid "Close" +msgstr "" + +#: ipaserver/plugins/internal.py:211 ipaserver/plugins/internal.py:1913 +msgid "Disable" +msgstr "" + +#: ipaserver/plugins/internal.py:212 ipaserver/plugins/internal.py:643 +msgid "Download" +msgstr "" + +#: ipaserver/plugins/internal.py:213 +msgid "Download certificate as PEM formatted file." +msgstr "" + +#: ipaserver/plugins/internal.py:214 +msgid "Edit" +msgstr "" + +#: ipaserver/plugins/internal.py:215 ipaserver/plugins/internal.py:1915 +msgid "Enable" +msgstr "" + +#: ipaserver/plugins/internal.py:217 +msgid "Find" +msgstr "" + +#: ipaserver/plugins/internal.py:218 +msgid "Get" +msgstr "" + +#: ipaserver/plugins/internal.py:219 +msgid "Hide" +msgstr "" + +#: ipaserver/plugins/internal.py:220 +msgid "Issue" +msgstr "" + +#: ipaserver/plugins/internal.py:221 +msgid "Match" +msgstr "" + +#: ipaserver/plugins/internal.py:222 +msgid "Match users according to certificate." +msgstr "" + +#: ipaserver/plugins/internal.py:223 +msgid "Migrate" +msgstr "" + +#: ipaserver/plugins/internal.py:224 +msgid "OK" +msgstr "" + +#: ipaserver/plugins/internal.py:225 +msgid "Refresh" +msgstr "" + +#: ipaserver/plugins/internal.py:226 +msgid "Reload current settings from the server." +msgstr "" + +#: ipaserver/plugins/internal.py:227 +msgid "Delete" +msgstr "" + +#: ipaserver/plugins/internal.py:228 ipaserver/plugins/internal.py:684 +msgid "Remove hold" +msgstr "" + +#: ipaserver/plugins/internal.py:229 +msgid "Reset" +msgstr "" + +#: ipaserver/plugins/internal.py:230 ipaserver/plugins/internal.py:1702 +msgid "Reset Password" +msgstr "" + +#: ipaserver/plugins/internal.py:231 +msgid "Reset Password and Log in" +msgstr "" + +#: ipaserver/plugins/internal.py:232 +msgid "Restore" +msgstr "" + +#: ipaserver/plugins/internal.py:233 +msgid "Retry" +msgstr "" + +#: ipaserver/plugins/internal.py:234 +msgid "Revert" +msgstr "" + +#: ipaserver/plugins/internal.py:236 +msgid "Revoke" +msgstr "" + +#: ipaserver/plugins/internal.py:237 +msgid "Save" +msgstr "" + +#: ipaserver/plugins/internal.py:238 +msgid "Set" +msgstr "" + +#: ipaserver/plugins/internal.py:239 +msgid "Show" +msgstr "" + +#: ipaserver/plugins/internal.py:240 +msgid "Stage" +msgstr "" + +#: ipaserver/plugins/internal.py:242 +msgid "Update" +msgstr "" + +#: ipaserver/plugins/internal.py:243 +msgid "View" +msgstr "" + +#: ipaserver/plugins/internal.py:246 ipaserver/plugins/internal.py:1710 +msgid "Customization" +msgstr "" + +#: ipaserver/plugins/internal.py:247 +msgid "Pagination Size" +msgstr "" + +#: ipaserver/plugins/internal.py:250 +msgid "Collapse All" +msgstr "" + +#: ipaserver/plugins/internal.py:251 +msgid "Expand All" +msgstr "" + +#: ipaserver/plugins/internal.py:252 +msgid "General" +msgstr "" + +#: ipaserver/plugins/internal.py:253 +msgid "Identity Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:254 +msgid "Record Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:255 +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:256 +msgid "Back to Top" +msgstr "" + +#: ipaserver/plugins/internal.py:257 +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#: ipaserver/plugins/internal.py:260 +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#: ipaserver/plugins/internal.py:261 +msgid "Add custom value" +msgstr "" + +#: ipaserver/plugins/internal.py:263 +msgid "Available" +msgstr "" + +#: ipaserver/plugins/internal.py:264 +msgid "Some operations failed." +msgstr "" + +#: ipaserver/plugins/internal.py:265 +msgid "Operations Error" +msgstr "" + +#: ipaserver/plugins/internal.py:266 +msgid "Confirmation" +msgstr "" + +#: ipaserver/plugins/internal.py:267 +msgid "Custom value" +msgstr "" + +#: ipaserver/plugins/internal.py:268 +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +#: ipaserver/plugins/internal.py:269 +msgid "Unsaved Changes" +msgstr "" + +#: ipaserver/plugins/internal.py:270 +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +#: ipaserver/plugins/internal.py:271 +msgid "Hide details" +msgstr "" + +#: ipaserver/plugins/internal.py:273 +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +#: ipaserver/plugins/internal.py:274 +msgid "Prospective" +msgstr "" + +#: ipaserver/plugins/internal.py:275 +msgid "Redirection" +msgstr "" + +#: ipaserver/plugins/internal.py:276 +msgid "Select entries to be removed." +msgstr "" + +#: ipaserver/plugins/internal.py:278 +msgid "Result" +msgstr "" + +#: ipaserver/plugins/internal.py:279 +msgid "Show details" +msgstr "" + +#: ipaserver/plugins/internal.py:280 +msgid "Success" +msgstr "" + +#: ipaserver/plugins/internal.py:281 +msgid "Validation error" +msgstr "" + +#: ipaserver/plugins/internal.py:282 +msgid "Input form contains invalid or missing values." +msgstr "" + +#: ipaserver/plugins/internal.py:285 +msgid "Please try the following options:" +msgstr "" + +#: ipaserver/plugins/internal.py:286 +msgid "If the problem persists please contact the system administrator." +msgstr "" + +#: ipaserver/plugins/internal.py:287 +msgid "Refresh the page." +msgstr "" + +#: ipaserver/plugins/internal.py:288 +msgid "Reload the browser." +msgstr "" + +#: ipaserver/plugins/internal.py:289 +msgid "Return to the main page and retry the operation" +msgstr "" + +#: ipaserver/plugins/internal.py:290 +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +#: ipaserver/plugins/internal.py:294 +msgid "HTTP Error" +msgstr "" + +#: ipaserver/plugins/internal.py:295 +msgid "Internal Error" +msgstr "" + +#: ipaserver/plugins/internal.py:296 +msgid "IPA Error" +msgstr "" + +#: ipaserver/plugins/internal.py:297 +msgid "No response" +msgstr "" + +#: ipaserver/plugins/internal.py:298 +msgid "Unknown Error" +msgstr "" + +#: ipaserver/plugins/internal.py:299 +msgid "URL" +msgstr "" + +#: ipaserver/plugins/internal.py:302 +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#: ipaserver/plugins/internal.py:303 +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#: ipaserver/plugins/internal.py:304 +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#: ipaserver/plugins/internal.py:305 +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +#: ipaserver/plugins/internal.py:308 +msgid "Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:309 ipaserver/plugins/internal.py:1723 +msgid "Search" +msgstr "" + +#: ipaserver/plugins/internal.py:311 +msgid "False" +msgstr "" + +#: ipaserver/plugins/internal.py:314 +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:317 +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:320 +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:323 +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:326 +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:329 +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:332 +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:335 +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:337 +msgid "Allowed to create keytab" +msgstr "" + +#: ipaserver/plugins/internal.py:338 +msgid "Allowed to retrieve keytab" +msgstr "" + +#: ipaserver/plugins/internal.py:340 +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:343 +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:346 +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:349 +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:352 +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:355 +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:358 +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:361 +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:365 +msgid "Add Kerberos Principal Alias" +msgstr "" + +#: ipaserver/plugins/internal.py:366 +msgid "New kerberos principal alias" +msgstr "" + +#: ipaserver/plugins/internal.py:367 +msgid "Remove Kerberos Alias" +msgstr "" + +#: ipaserver/plugins/internal.py:368 +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +#: ipaserver/plugins/internal.py:371 +msgid "Inherited from server configuration" +msgstr "" + +#: ipaserver/plugins/internal.py:372 +msgid "MS-PAC" +msgstr "" + +#: ipaserver/plugins/internal.py:373 +msgid "Override inherited settings" +msgstr "" + +#: ipaserver/plugins/internal.py:374 +msgid "PAD" +msgstr "" + +#: ipaserver/plugins/internal.py:377 +msgid "Authenticating" +msgstr "" + +#: ipaserver/plugins/internal.py:379 +msgid "Authentication with personal certificate failed" +msgstr "" + +#: ipaserver/plugins/internal.py:381 +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +#: ipaserver/plugins/internal.py:385 +msgid "Continue to next page" +msgstr "" + +#: ipaserver/plugins/internal.py:387 +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +#: ipaserver/plugins/internal.py:390 +msgid "Login failed due to an unknown reason" +msgstr "" + +#: ipaserver/plugins/internal.py:391 +msgid "Logged In As" +msgstr "" + +#: ipaserver/plugins/internal.py:392 +msgid "Authentication with Kerberos failed" +msgstr "" + +#: ipaserver/plugins/internal.py:394 +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +#: ipaserver/plugins/internal.py:399 +msgid "Loading" +msgstr "" + +#: ipaserver/plugins/internal.py:401 +msgid "Kerberos Principal you entered is expired" +msgstr "" + +#: ipaserver/plugins/internal.py:402 +msgid "Loading data" +msgstr "" + +#: ipaserver/plugins/internal.py:403 +msgid "Log in" +msgstr "" + +#: ipaserver/plugins/internal.py:404 +msgid "Log In Using Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:405 +msgid "Log in using personal certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:406 ipaserver/plugins/internal.py:1711 +msgid "Log out" +msgstr "" + +#: ipaserver/plugins/internal.py:407 +msgid "Log out error" +msgstr "" + +#: ipaserver/plugins/internal.py:409 ipaserver/plugins/internal.py:1696 +msgid "Password or Password+One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:410 +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +#: ipaserver/plugins/internal.py:411 +msgid "Sync OTP Token" +msgstr "" + +#: ipaserver/plugins/internal.py:412 +msgid "Synchronizing" +msgstr "" + +#: ipaserver/plugins/internal.py:414 +msgid "The user account you entered is locked" +msgstr "" + +#: ipaserver/plugins/internal.py:417 +msgid "number of passwords" +msgstr "" + +#: ipaserver/plugins/internal.py:418 +msgid "seconds" +msgstr "" + +#: ipaserver/plugins/internal.py:421 +msgid "Migrating" +msgstr "" + +#: ipaserver/plugins/internal.py:423 +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#: ipaserver/plugins/internal.py:426 +msgid "Password migration was not successful" +msgstr "" + +#: ipaserver/plugins/internal.py:428 +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#: ipaserver/plugins/internal.py:435 ipaserver/plugins/internal.py:1678 +msgid "The password or username you entered is incorrect" +msgstr "" + +#: ipaserver/plugins/internal.py:436 +msgid "Password migration was successful" +msgstr "" + +#: ipaserver/plugins/internal.py:440 ipaserver/plugins/internal.py:525 +#: ipaserver/plugins/internal.py:1213 +msgid "Attribute" +msgstr "" + +#: ipaserver/plugins/internal.py:443 +msgid "Add delegation" +msgstr "" + +#: ipaserver/plugins/internal.py:444 +msgid "Remove delegations" +msgstr "" + +#: ipaserver/plugins/internal.py:447 ipaserver/plugins/internal.py:779 +msgid "Add permission" +msgstr "" + +#: ipaserver/plugins/internal.py:449 +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:451 +msgid "Remove permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:453 +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:457 +msgid "Add privilege" +msgstr "" + +#: ipaserver/plugins/internal.py:459 +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:462 +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:464 +msgid "Remove privileges" +msgstr "" + +#: ipaserver/plugins/internal.py:466 +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:469 +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:473 +msgid "Role Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:474 +msgid "Add role" +msgstr "" + +#: ipaserver/plugins/internal.py:476 +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:479 +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:482 +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:485 +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#: ipaserver/plugins/internal.py:488 +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:491 +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:493 +msgid "Remove roles" +msgstr "" + +#: ipaserver/plugins/internal.py:495 +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#: ipaserver/plugins/internal.py:498 +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:501 +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:504 +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:507 +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:510 +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:514 +msgid "Add self service permission" +msgstr "" + +#: ipaserver/plugins/internal.py:515 +msgid "Remove self service permissions" +msgstr "" + +#: ipaserver/plugins/internal.py:518 +msgid "Add rule" +msgstr "" + +#: ipaserver/plugins/internal.py:520 +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:523 +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:527 +msgid "Are you sure you want to change default group?" +msgstr "" + +#: ipaserver/plugins/internal.py:529 +msgid "Default host group" +msgstr "" + +#: ipaserver/plugins/internal.py:530 +msgid "Default user group" +msgstr "" + +#: ipaserver/plugins/internal.py:531 +msgid "Exclusive" +msgstr "" + +#: ipaserver/plugins/internal.py:532 +msgid "Expression" +msgstr "" + +#: ipaserver/plugins/internal.py:533 +msgid "Host group rule" +msgstr "" + +#: ipaserver/plugins/internal.py:534 +msgid "Host group rules" +msgstr "" + +#: ipaserver/plugins/internal.py:535 +msgid "Inclusive" +msgstr "" + +#: ipaserver/plugins/internal.py:536 +msgid "Remove auto membership rules" +msgstr "" + +#: ipaserver/plugins/internal.py:538 +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:541 +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:543 +msgid "User group rule" +msgstr "" + +#: ipaserver/plugins/internal.py:544 +msgid "User group rules" +msgstr "" + +#: ipaserver/plugins/internal.py:547 +msgid "Add automount key" +msgstr "" + +#: ipaserver/plugins/internal.py:548 +msgid "Remove automount keys" +msgstr "" + +#: ipaserver/plugins/internal.py:551 +msgid "Add automount location" +msgstr "" + +#: ipaserver/plugins/internal.py:552 +msgid "Automount Location Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:553 +msgid "Remove automount locations" +msgstr "" + +#: ipaserver/plugins/internal.py:556 +msgid "Add automount map" +msgstr "" + +#: ipaserver/plugins/internal.py:557 +msgid "Map Type" +msgstr "" + +#: ipaserver/plugins/internal.py:558 +msgid "Direct" +msgstr "" + +#: ipaserver/plugins/internal.py:559 +msgid "Indirect" +msgstr "" + +#: ipaserver/plugins/internal.py:560 +msgid "Remove automount maps" +msgstr "" + +#: ipaserver/plugins/internal.py:563 +msgid "Add certificate authority" +msgstr "" + +#: ipaserver/plugins/internal.py:564 +msgid "Remove certificate authorities" +msgstr "" + +#: ipaserver/plugins/internal.py:567 +msgid "Add CA ACL" +msgstr "" + +#: ipaserver/plugins/internal.py:569 +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:573 +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:576 +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:579 +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:582 +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:585 +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:588 +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:590 +msgid "All" +msgstr "" + +#: ipaserver/plugins/internal.py:591 +msgid "Any CA" +msgstr "" + +#: ipaserver/plugins/internal.py:592 ipaserver/plugins/internal.py:901 +#: ipaserver/plugins/internal.py:1158 ipaserver/plugins/internal.py:1281 +#: ipaserver/plugins/internal.py:1436 +msgid "Any Host" +msgstr "" + +#: ipaserver/plugins/internal.py:593 ipaserver/plugins/internal.py:902 +msgid "Any Service" +msgstr "" + +#: ipaserver/plugins/internal.py:594 +msgid "Any Profile" +msgstr "" + +#: ipaserver/plugins/internal.py:595 ipaserver/plugins/internal.py:903 +#: ipaserver/plugins/internal.py:1159 ipaserver/plugins/internal.py:1282 +#: ipaserver/plugins/internal.py:1437 +msgid "Anyone" +msgstr "" + +#: ipaserver/plugins/internal.py:596 ipaserver/plugins/internal.py:905 +#: ipaserver/plugins/internal.py:1442 +msgid "Rule status" +msgstr "" + +#: ipaserver/plugins/internal.py:597 +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +#: ipaserver/plugins/internal.py:599 +msgid "Remove CA ACLs" +msgstr "" + +#: ipaserver/plugins/internal.py:601 +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:605 +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:608 +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:611 +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:614 +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:617 +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:620 +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:622 +msgid "Specified CAs" +msgstr "" + +#: ipaserver/plugins/internal.py:623 ipaserver/plugins/internal.py:927 +#: ipaserver/plugins/internal.py:1185 ipaserver/plugins/internal.py:1297 +#: ipaserver/plugins/internal.py:1487 +msgid "Specified Hosts and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:624 +msgid "Specified Profiles" +msgstr "" + +#: ipaserver/plugins/internal.py:625 ipaserver/plugins/internal.py:928 +msgid "Specified Services and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:626 ipaserver/plugins/internal.py:929 +#: ipaserver/plugins/internal.py:1186 ipaserver/plugins/internal.py:1298 +#: ipaserver/plugins/internal.py:1488 +msgid "Specified Users and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:627 +msgid "Permitted to have certificates issued" +msgstr "" + +#: ipaserver/plugins/internal.py:630 +msgid "Remove certificate profiles" +msgstr "" + +#: ipaserver/plugins/internal.py:633 +msgid "AA Compromise" +msgstr "" + +#: ipaserver/plugins/internal.py:634 +msgid "Add principal" +msgstr "" + +#: ipaserver/plugins/internal.py:635 +msgid "Affiliation Changed" +msgstr "" + +#: ipaserver/plugins/internal.py:636 ipaserver/plugins/ca.py:341 +#: ipaserver/plugins/ca.py:350 ipaserver/plugins/ca.py:369 +#: ipaserver/plugins/ca.py:409 +msgid "CA" +msgstr "" + +#: ipaserver/plugins/internal.py:637 +msgid "CA Compromise" +msgstr "" + +#: ipaserver/plugins/internal.py:639 ipaserver/plugins/internal.py:1925 +msgid "Certificates" +msgstr "" + +#: ipaserver/plugins/internal.py:640 +msgid "Certificate Hold" +msgstr "" + +#: ipaserver/plugins/internal.py:641 +msgid "Cessation of Operation" +msgstr "" + +#: ipaserver/plugins/internal.py:642 +msgid "Common Name" +msgstr "" + +#: ipaserver/plugins/internal.py:644 +msgid "the certificate with serial number " +msgstr "" + +#: ipaserver/plugins/internal.py:645 +msgid "Expires On" +msgstr "" + +#: ipaserver/plugins/internal.py:646 +msgid "Issued on from" +msgstr "" + +#: ipaserver/plugins/internal.py:647 +msgid "Issued on to" +msgstr "" + +#: ipaserver/plugins/internal.py:648 +msgid "Maximum serial number" +msgstr "" + +#: ipaserver/plugins/internal.py:649 +msgid "Minimum serial number" +msgstr "" + +#: ipaserver/plugins/internal.py:650 ipaserver/plugins/internal.py:691 +#: ipaserver/plugins/host.py:544 ipaserver/plugins/service.py:529 +#: ipaserver/plugins/cert.py:1283 +msgid "Revocation reason" +msgstr "" + +#: ipaserver/plugins/internal.py:651 +msgid "Revoked on from" +msgstr "" + +#: ipaserver/plugins/internal.py:652 +msgid "Revoked on to" +msgstr "" + +#: ipaserver/plugins/internal.py:653 ipaserver/plugins/internal.py:729 +#: ipaserver/plugins/host.py:512 ipaserver/plugins/service.py:497 +#: ipaserver/plugins/cert.py:365 ipaserver/plugins/cert.py:1502 +#: ipaserver/plugins/baseuser.py:833 +msgid "Subject" +msgstr "" + +#: ipaserver/plugins/internal.py:654 +msgid "Valid not after from" +msgstr "" + +#: ipaserver/plugins/internal.py:655 +msgid "Valid not after to" +msgstr "" + +#: ipaserver/plugins/internal.py:656 +msgid "Valid not before from" +msgstr "" + +#: ipaserver/plugins/internal.py:657 +msgid "Valid not before to" +msgstr "" + +#: ipaserver/plugins/internal.py:658 +msgid "Fingerprints" +msgstr "" + +#: ipaserver/plugins/internal.py:659 +msgid "Get Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:660 +msgid "Certificate Hold Removed" +msgstr "" + +#: ipaserver/plugins/internal.py:662 +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:665 +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:668 +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:670 +msgid "Issue new certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:671 +msgid "Issued By" +msgstr "" + +#: ipaserver/plugins/internal.py:672 +msgid "Issued On" +msgstr "" + +#: ipaserver/plugins/internal.py:673 +msgid "Issued To" +msgstr "" + +#: ipaserver/plugins/internal.py:674 +msgid "Key Compromise" +msgstr "" + +#: ipaserver/plugins/internal.py:675 +msgid "No Valid Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:676 +msgid "New Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:677 +msgid "Certificate in base64 or PEM format" +msgstr "" + +#: ipaserver/plugins/internal.py:678 +msgid "Note" +msgstr "" + +#: ipaserver/plugins/internal.py:679 +msgid "Organization" +msgstr "" + +#: ipaserver/plugins/internal.py:680 +msgid "Organizational Unit" +msgstr "" + +#: ipaserver/plugins/internal.py:681 +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +#: ipaserver/plugins/internal.py:682 +msgid "Privilege Withdrawn" +msgstr "" + +#: ipaserver/plugins/internal.py:683 +msgid "Reason for Revocation" +msgstr "" + +#: ipaserver/plugins/internal.py:685 +msgid "Remove certificate hold" +msgstr "" + +#: ipaserver/plugins/internal.py:686 +msgid "Do you want to remove the certificate hold?" +msgstr "" + +#: ipaserver/plugins/internal.py:687 +msgid "Remove from CRL" +msgstr "" + +#: ipaserver/plugins/internal.py:688 +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#: ipaserver/plugins/internal.py:689 +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#: ipaserver/plugins/internal.py:690 +msgid "Certificate requested" +msgstr "" + +#: ipaserver/plugins/internal.py:692 +msgid "Revoke certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:693 +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#: ipaserver/plugins/internal.py:694 +msgid "Certificate Revoked" +msgstr "" + +#: ipaserver/plugins/internal.py:695 +msgid "REVOKED" +msgstr "" + +#: ipaserver/plugins/internal.py:696 ipaserver/plugins/host.py:516 +#: ipaserver/plugins/service.py:501 +msgid "Serial Number" +msgstr "" + +#: ipaserver/plugins/internal.py:697 ipaserver/plugins/host.py:520 +#: ipaserver/plugins/service.py:505 +msgid "Serial Number (hex)" +msgstr "" + +#: ipaserver/plugins/internal.py:698 +msgid "SHA1 Fingerprint" +msgstr "" + +#: ipaserver/plugins/internal.py:699 +msgid "SHA256 Fingerprint" +msgstr "" + +#: ipaserver/plugins/internal.py:700 ipaserver/plugins/internal.py:1030 +#: ipaserver/plugins/internal.py:1333 ipaserver/plugins/internal.py:1917 +#: ipaserver/plugins/cert.py:1273 +msgid "Status" +msgstr "" + +#: ipaserver/plugins/internal.py:701 +msgid "Superseded" +msgstr "" + +#: ipaserver/plugins/internal.py:702 +msgid "Unspecified" +msgstr "" + +#: ipaserver/plugins/internal.py:703 +msgid "Valid Certificate Present" +msgstr "" + +#: ipaserver/plugins/internal.py:704 +msgid "Valid from" +msgstr "" + +#: ipaserver/plugins/internal.py:705 +msgid "Valid to" +msgstr "" + +#: ipaserver/plugins/internal.py:706 +msgid "Validity" +msgstr "" + +#: ipaserver/plugins/internal.py:707 +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#: ipaserver/plugins/internal.py:708 +msgid "View Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:711 +msgid "Certificate Data" +msgstr "" + +#: ipaserver/plugins/internal.py:712 +msgid "Certificate For Match" +msgstr "" + +#: ipaserver/plugins/internal.py:713 +msgid "Certificate Mapping Match" +msgstr "" + +#: ipaserver/plugins/internal.py:715 +msgid "Matched Users" +msgstr "" + +#: ipaserver/plugins/internal.py:716 +msgid "User Login" +msgstr "" + +#: ipaserver/plugins/internal.py:719 +msgid "Add certificate identity mapping rule" +msgstr "" + +#: ipaserver/plugins/internal.py:720 +msgid "Add certificate mapping data" +msgstr "" + +#: ipaserver/plugins/internal.py:721 ipaserver/plugins/baseuser.py:404 +#: ipaserver/plugins/baseuser.py:405 +msgid "Certificate mapping data" +msgstr "" + +#: ipaserver/plugins/internal.py:723 +msgid "Configuration string" +msgstr "" + +#: ipaserver/plugins/internal.py:724 +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#: ipaserver/plugins/internal.py:725 +msgid "Remove certificate mapping data" +msgstr "" + +#: ipaserver/plugins/internal.py:726 ipaserver/plugins/host.py:524 +#: ipaserver/plugins/service.py:509 ipaserver/plugins/cert.py:425 +#: ipaserver/plugins/baseuser.py:826 +msgid "Issuer" +msgstr "" + +#: ipaserver/plugins/internal.py:727 +msgid "Issuer and subject" +msgstr "" + +#: ipaserver/plugins/internal.py:728 +msgid "Remove certificate identity mapping rules" +msgstr "" + +#: ipaserver/plugins/internal.py:730 ipaserver/plugins/schema.py:153 msgid "Version" msgstr "" -#: ipaserver/plugins/schema.py:178 -msgid "Parameters" +#: ipaserver/plugins/internal.py:733 +msgid "Group Options" msgstr "" -#: ipaserver/plugins/schema.py:213 -msgid "Method of" +#: ipaserver/plugins/internal.py:734 +msgid "Search Options" msgstr "" -#: ipaserver/plugins/schema.py:218 -msgid "Method name" +#: ipaserver/plugins/internal.py:735 +msgid "SELinux Options" msgstr "" -#: ipaserver/plugins/schema.py:263 ipaserver/plugins/schema.py:332 -#: ipaserver/plugins/schema.py:423 ipaserver/plugins/schema.py:658 -#: ipaserver/plugins/schema.py:751 ipaserver/plugins/baseldap.py:658 +#: ipaserver/plugins/internal.py:736 +msgid "Server Options" +msgstr "" + +#: ipaserver/plugins/internal.py:737 +msgid "Service Options" +msgstr "" + +#: ipaserver/plugins/internal.py:738 +msgid "User Options" +msgstr "" + +#: ipaserver/plugins/internal.py:743 +msgid "Forward first" +msgstr "" + +#: ipaserver/plugins/internal.py:744 +msgid "Forwarding disabled" +msgstr "" + +#: ipaserver/plugins/internal.py:745 +msgid "Forward only" +msgstr "" + +#: ipaserver/plugins/internal.py:746 ipaserver/plugins/internal.py:1445 +#: ipaserver/plugins/internal.py:1551 +msgid "Options" +msgstr "" + +#: ipaserver/plugins/internal.py:747 +msgid "Update System DNS Records" +msgstr "" + +#: ipaserver/plugins/internal.py:748 +msgid "Do you want to update system DNS records?" +msgstr "" + +#: ipaserver/plugins/internal.py:749 +msgid "System DNS records updated" +msgstr "" + +#: ipaserver/plugins/internal.py:752 +msgid "Add DNS forward zone" +msgstr "" + +#: ipaserver/plugins/internal.py:753 +msgid "Remove DNS forward zones" +msgstr "" + +#: ipaserver/plugins/internal.py:756 +msgid "Add DNS resource record" +msgstr "" + +#: ipaserver/plugins/internal.py:758 +msgid "DNS record was deleted because it contained no data." +msgstr "" + +#: ipaserver/plugins/internal.py:759 +msgid "Other Record Types" +msgstr "" + +#: ipaserver/plugins/internal.py:760 +msgid "Address not valid, can't redirect" +msgstr "" + +#: ipaserver/plugins/internal.py:761 +msgid "Create dns record" +msgstr "" + +#: ipaserver/plugins/internal.py:762 +msgid "Creating record." +msgstr "" + +#: ipaserver/plugins/internal.py:763 +msgid "Record creation failed." +msgstr "" + +#: ipaserver/plugins/internal.py:764 +msgid "Checking if record exists." +msgstr "" + +#: ipaserver/plugins/internal.py:765 +msgid "Record not found." +msgstr "" + +#: ipaserver/plugins/internal.py:766 +msgid "Redirection to PTR record" +msgstr "" + +#: ipaserver/plugins/internal.py:767 +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +#: ipaserver/plugins/internal.py:768 +msgid "Target reverse zone not found." +msgstr "" + +#: ipaserver/plugins/internal.py:769 +msgid "Fetching DNS zones." +msgstr "" + +#: ipaserver/plugins/internal.py:770 +msgid "An error occurred while fetching dns zones." +msgstr "" + +#: ipaserver/plugins/internal.py:771 +msgid "You will be redirected to DNS Zone." +msgstr "" + +#: ipaserver/plugins/internal.py:772 +msgid "Remove DNS resource records" +msgstr "" + +#: ipaserver/plugins/internal.py:773 +msgid "Standard Record Types" +msgstr "" + +#: ipaserver/plugins/internal.py:774 +msgid "Records for DNS Zone" +msgstr "" + +#: ipaserver/plugins/internal.py:775 +msgid "Record Type" +msgstr "" + +#: ipaserver/plugins/internal.py:778 +msgid "Add DNS zone" +msgstr "" + +#: ipaserver/plugins/internal.py:780 +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:781 +msgid "DNS Zone Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:782 +msgid "Remove DNS zones" +msgstr "" + +#: ipaserver/plugins/internal.py:783 +msgid "Remove Permission" +msgstr "" + +#: ipaserver/plugins/internal.py:784 +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:785 +msgid "Skip DNS check" +msgstr "" + +#: ipaserver/plugins/internal.py:786 +msgid "Skip overlap check" +msgstr "" + +#: ipaserver/plugins/internal.py:787 +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +#: ipaserver/plugins/internal.py:788 +msgid "Authoritative nameserver change" +msgstr "" + +#: ipaserver/plugins/internal.py:793 +msgid "Level" +msgstr "" + +#: ipaserver/plugins/internal.py:794 +msgid "Set Domain Level" +msgstr "" + +#: ipaserver/plugins/internal.py:797 +msgid "Add user group" +msgstr "" + +#: ipaserver/plugins/internal.py:799 +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:802 +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:805 +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:808 +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:811 +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:814 +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:817 +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:820 +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:823 +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:827 +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:831 +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:835 +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:839 +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:841 +msgid "Group Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:842 ipaserver/plugins/internal.py:1160 +#: ipaserver/plugins/internal.py:1440 +msgid "External" +msgstr "" + +#: ipaserver/plugins/internal.py:843 ipaserver/plugins/internal.py:1373 +msgid "Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:844 +msgid "Group categories" +msgstr "" + +#: ipaserver/plugins/internal.py:845 +msgid "Change to external group" +msgstr "" + +#: ipaserver/plugins/internal.py:846 +msgid "Change to POSIX group" +msgstr "" + +#: ipaserver/plugins/internal.py:847 +msgid "Non-POSIX" +msgstr "" + +#: ipaserver/plugins/internal.py:848 +msgid "POSIX" +msgstr "" + +#: ipaserver/plugins/internal.py:849 +msgid "Remove user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:851 +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:854 +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:857 +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:860 +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:863 +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:866 +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:869 +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:872 +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:875 +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:877 +msgid "Group Type" +msgstr "" + +#: ipaserver/plugins/internal.py:881 +msgid "Add HBAC rule" +msgstr "" + +#: ipaserver/plugins/internal.py:883 +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:886 +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:889 +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:892 +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:896 +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:899 +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:904 +msgid "Accessing" +msgstr "" + +#: ipaserver/plugins/internal.py:906 +msgid "Remove HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:908 +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:911 +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:914 +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:917 +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:921 +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:924 +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:926 +msgid "Via Service" +msgstr "" + +#: ipaserver/plugins/internal.py:930 ipaserver/plugins/internal.py:1489 +msgid "Who" +msgstr "" + +#: ipaserver/plugins/internal.py:933 +msgid "Add HBAC service" +msgstr "" + +#: ipaserver/plugins/internal.py:935 +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#: ipaserver/plugins/internal.py:938 +msgid "Remove HBAC services" +msgstr "" + +#: ipaserver/plugins/internal.py:940 +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#: ipaserver/plugins/internal.py:945 +msgid "Add HBAC service group" +msgstr "" + +#: ipaserver/plugins/internal.py:947 +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:950 +msgid "Remove HBAC service groups" +msgstr "" + +#: ipaserver/plugins/internal.py:952 +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:958 +msgid "Access Denied" +msgstr "" + +#: ipaserver/plugins/internal.py:959 +msgid "Access Granted" +msgstr "" + +#: ipaserver/plugins/internal.py:960 +msgid "Include Disabled" +msgstr "" + +#: ipaserver/plugins/internal.py:961 +msgid "Include Enabled" +msgstr "" + +#: ipaserver/plugins/internal.py:962 +msgid "HBAC Test" +msgstr "" + +#: ipaserver/plugins/internal.py:963 +msgid "Matched" +msgstr "" + +#: ipaserver/plugins/internal.py:964 +msgid "Missing values: " +msgstr "" + +#: ipaserver/plugins/internal.py:965 +msgid "New Test" +msgstr "" + +#: ipaserver/plugins/internal.py:966 +msgid "Rules" +msgstr "" + +#: ipaserver/plugins/internal.py:967 +msgid "Run Test" +msgstr "" + +#: ipaserver/plugins/internal.py:968 +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +#: ipaserver/plugins/internal.py:969 +msgid "Unmatched" +msgstr "" + +#: ipaserver/plugins/internal.py:972 +msgid "Add host" +msgstr "" + +#: ipaserver/plugins/internal.py:974 +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:977 +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:980 +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:983 +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:986 +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:989 +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:991 +msgid "Host Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:992 ipaserver/plugins/internal.py:1322 +msgid "Host Name" +msgstr "" + +#: ipaserver/plugins/internal.py:993 ipaserver/plugins/internal.py:1320 +msgid "Delete Key, Unprovision" +msgstr "" + +#: ipaserver/plugins/internal.py:994 +msgid "Host Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:995 +msgid "Enrolled" +msgstr "" + +#: ipaserver/plugins/internal.py:996 +msgid "Enrollment" +msgstr "" + +#: ipaserver/plugins/internal.py:997 +msgid "Fully Qualified Host Name" +msgstr "" + +#: ipaserver/plugins/internal.py:998 +msgid "Generate OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:999 +msgid "Generated OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1000 +msgid "Kerberos Key" +msgstr "" + +#: ipaserver/plugins/internal.py:1001 ipaserver/plugins/internal.py:1323 +msgid "Kerberos Key Not Present" +msgstr "" + +#: ipaserver/plugins/internal.py:1002 +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1003 ipaserver/plugins/internal.py:1691 +msgid "One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1004 +msgid "One-Time Password Not Present" +msgstr "" + +#: ipaserver/plugins/internal.py:1005 +msgid "One-Time Password Present" +msgstr "" + +#: ipaserver/plugins/internal.py:1006 +msgid "Reset OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1007 +msgid "Reset One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1008 +msgid "Set OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1009 +msgid "OTP set" +msgstr "" + +#: ipaserver/plugins/internal.py:1010 +msgid "Set One-Time Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1011 +msgid "Remove hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1013 +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1016 +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1019 +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1022 +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1025 +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1028 +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1031 ipaserver/plugins/internal.py:1334 +msgid "Unprovision" +msgstr "" + +#: ipaserver/plugins/internal.py:1032 +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +#: ipaserver/plugins/internal.py:1033 +msgid "Unprovisioning host" +msgstr "" + +#: ipaserver/plugins/internal.py:1034 +msgid "Host unprovisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1037 +msgid "Add host group" +msgstr "" + +#: ipaserver/plugins/internal.py:1039 +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1042 +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1045 +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1048 +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1051 +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1054 +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1057 +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1061 +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1065 +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1069 +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1073 +msgid "Host Group Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1074 +msgid "Remove host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1076 +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1079 +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1082 +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1085 +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1088 +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1091 +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1095 +msgid "User to override" +msgstr "" + +#: ipaserver/plugins/internal.py:1096 +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +#: ipaserver/plugins/internal.py:1097 +msgid "Enter trusted user login." +msgstr "" + +#: ipaserver/plugins/internal.py:1098 ipaserver/plugins/internal.py:1713 +msgid "Profile" +msgstr "" + +#: ipaserver/plugins/internal.py:1101 +msgid "Group to override" +msgstr "" + +#: ipaserver/plugins/internal.py:1102 +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#: ipaserver/plugins/internal.py:1103 +msgid "Enter trusted group name." +msgstr "" + +#: ipaserver/plugins/internal.py:1106 +msgid "Add ID view" +msgstr "" + +#: ipaserver/plugins/internal.py:1107 +msgid "Add group ID override" +msgstr "" + +#: ipaserver/plugins/internal.py:1108 +msgid "Add user ID override" +msgstr "" + +#: ipaserver/plugins/internal.py:1109 +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +#: ipaserver/plugins/internal.py:1110 ipaserver/plugins/internal.py:1111 +msgid "Applied to hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1112 +msgid "Apply to host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1114 +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1116 +msgid "Apply to hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1118 +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1121 +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +#: ipaserver/plugins/internal.py:1122 +msgid "Remove ID views" +msgstr "" + +#: ipaserver/plugins/internal.py:1123 +msgid "Remove user ID overrides" +msgstr "" + +#: ipaserver/plugins/internal.py:1124 +msgid "Remove group ID overrides" +msgstr "" + +#: ipaserver/plugins/internal.py:1125 +msgid "Un-apply from host groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1126 +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1127 +msgid "Un-apply" +msgstr "" + +#: ipaserver/plugins/internal.py:1128 +msgid "Un-apply from hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1129 +msgid "Un-apply ID Views from hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1130 +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1132 +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#: ipaserver/plugins/internal.py:1136 ipaserver/plugins/krbtpolicy.py:128 +#: ipaserver/plugins/krbtpolicy.py:129 +msgid "Kerberos Ticket Policy" +msgstr "" + +#: ipaserver/plugins/internal.py:1139 +msgid "Add netgroup" +msgstr "" + +#: ipaserver/plugins/internal.py:1141 +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1144 +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1147 +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1150 +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1153 +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1156 +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1161 ipaserver/plugins/internal.py:1283 +#: ipaserver/plugins/host.py:457 +msgid "Host" +msgstr "" + +#: ipaserver/plugins/internal.py:1164 +msgid "Netgroup Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1165 ipaserver/plugins/netgroup.py:196 +msgid "Netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1166 +msgid "Remove netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1168 +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1171 +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1174 +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1177 +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1180 +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1183 +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1192 +msgid "Add OTP token" +msgstr "" + +#: ipaserver/plugins/internal.py:1194 +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1196 +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#: ipaserver/plugins/internal.py:1197 +msgid "Configure your token" +msgstr "" + +#: ipaserver/plugins/internal.py:1198 +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#: ipaserver/plugins/internal.py:1199 +msgid "OTP Token Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1200 +msgid "Disable token" +msgstr "" + +#: ipaserver/plugins/internal.py:1201 +msgid "Enable token" +msgstr "" + +#: ipaserver/plugins/internal.py:1202 +msgid "Remove OTP tokens" +msgstr "" + +#: ipaserver/plugins/internal.py:1204 +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1206 +msgid "Show QR code" +msgstr "" + +#: ipaserver/plugins/internal.py:1207 +msgid "Show configuration uri" +msgstr "" + +#: ipaserver/plugins/internal.py:1208 +msgid "Counter-based (HOTP)" +msgstr "" + +#: ipaserver/plugins/internal.py:1209 +msgid "Time-based (TOTP)" +msgstr "" + +#: ipaserver/plugins/internal.py:1212 +msgid "Add Custom Attribute" +msgstr "" + +#: ipaserver/plugins/internal.py:1215 +msgid "Permission settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1216 +msgid "Attribute breakdown" +msgstr "" + +#: ipaserver/plugins/internal.py:1220 +msgid "Privilege Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1223 +msgid "Public key:" +msgstr "" + +#: ipaserver/plugins/internal.py:1224 +msgid "Set public key" +msgstr "" + +#: ipaserver/plugins/internal.py:1225 ipaserver/plugins/internal.py:1344 +msgid "Show/Set key" +msgstr "" + +#: ipaserver/plugins/internal.py:1226 ipaserver/plugins/internal.py:1345 +msgid "Modified: key not set" +msgstr "" + +#: ipaserver/plugins/internal.py:1227 ipaserver/plugins/internal.py:1346 +msgid "Modified" +msgstr "" + +#: ipaserver/plugins/internal.py:1228 ipaserver/plugins/internal.py:1347 +msgid "New: key not set" +msgstr "" + +#: ipaserver/plugins/internal.py:1229 ipaserver/plugins/internal.py:1348 +msgid "New: key set" +msgstr "" + +#: ipaserver/plugins/internal.py:1232 +msgid "Add password policy" +msgstr "" + +#: ipaserver/plugins/internal.py:1234 +msgid "Remove password policies" +msgstr "" + +#: ipaserver/plugins/internal.py:1237 +msgid "Add ID range" +msgstr "" + +#: ipaserver/plugins/internal.py:1238 +msgid "Range Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1239 ipaserver/plugins/idrange.py:255 +msgid "Auto private groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1240 +msgid "Base ID" +msgstr "" + +#: ipaserver/plugins/internal.py:1241 +msgid "Primary RID base" +msgstr "" + +#: ipaserver/plugins/internal.py:1242 +msgid "Range size" +msgstr "" + +#: ipaserver/plugins/internal.py:1243 +msgid "Domain SID" +msgstr "" + +#: ipaserver/plugins/internal.py:1244 +msgid "Secondary RID base" +msgstr "" + +#: ipaserver/plugins/internal.py:1245 +msgid "Remove ID ranges" +msgstr "" + +#: ipaserver/plugins/internal.py:1247 ipaserver/dcerpc_common.py:37 +msgid "Active Directory domain" +msgstr "" + +#: ipaserver/plugins/internal.py:1248 +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +#: ipaserver/plugins/internal.py:1249 +msgid "Detect" +msgstr "" + +#: ipaserver/plugins/internal.py:1250 +msgid "Local domain" +msgstr "" + +#: ipaserver/plugins/internal.py:1251 +msgid "IPA trust" +msgstr "" + +#: ipaserver/plugins/internal.py:1252 +msgid "Active Directory winsync" +msgstr "" + +#: ipaserver/plugins/internal.py:1255 +msgid "Add RADIUS server" +msgstr "" + +#: ipaserver/plugins/internal.py:1256 +msgid "RADIUS Proxy Server Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1257 +msgid "Remove RADIUS servers" +msgstr "" + +#: ipaserver/plugins/internal.py:1261 +msgid "Check DNS" +msgstr "" + +#: ipaserver/plugins/internal.py:1262 +msgid "Do you also want to perform DNS check?" +msgstr "" + +#: ipaserver/plugins/internal.py:1263 +msgid "Force Update" +msgstr "" + +#: ipaserver/plugins/internal.py:1268 +msgid "Add SELinux user map" +msgstr "" + +#: ipaserver/plugins/internal.py:1270 +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1273 +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1276 +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1279 +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1284 +msgid "Remove selinux user maps" +msgstr "" + +#: ipaserver/plugins/internal.py:1286 +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1289 +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1292 +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1295 +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1302 +msgid "Server Roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1303 +msgid "Server Role" +msgstr "" + +#: ipaserver/plugins/internal.py:1306 +msgid "Warning: Consider service replication" +msgstr "" + +#: ipaserver/plugins/internal.py:1307 +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#: ipaserver/plugins/internal.py:1308 +msgid "Delete Server" +msgstr "" + +#: ipaserver/plugins/internal.py:1309 +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#: ipaserver/plugins/internal.py:1312 +msgid "Add service" +msgstr "" + +#: ipaserver/plugins/internal.py:1314 +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1317 +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1319 +msgid "Service Certificate" +msgstr "" + +#: ipaserver/plugins/internal.py:1321 +msgid "Service Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1324 +msgid "Provisioning" +msgstr "" + +#: ipaserver/plugins/internal.py:1325 +msgid "Remove services" +msgstr "" + +#: ipaserver/plugins/internal.py:1327 +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1330 +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1335 +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +#: ipaserver/plugins/internal.py:1336 +msgid "Unprovisioning service" +msgstr "" + +#: ipaserver/plugins/internal.py:1337 +msgid "Service unprovisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1338 +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +#: ipaserver/plugins/internal.py:1341 +msgid "SSH public keys" +msgstr "" + +#: ipaserver/plugins/internal.py:1342 +msgid "SSH public key:" +msgstr "" + +#: ipaserver/plugins/internal.py:1343 +msgid "Set SSH key" +msgstr "" + +#: ipaserver/plugins/internal.py:1351 +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#: ipaserver/plugins/internal.py:1352 +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1353 +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +#: ipaserver/plugins/internal.py:1354 +msgid "Add stage user" +msgstr "" + +#: ipaserver/plugins/internal.py:1355 +msgid "Stage users" +msgstr "" + +#: ipaserver/plugins/internal.py:1356 +msgid "Preserved users" +msgstr "" + +#: ipaserver/plugins/internal.py:1357 +msgid "Remove preserved users" +msgstr "" + +#: ipaserver/plugins/internal.py:1358 +msgid "Remove stage users" +msgstr "" + +#: ipaserver/plugins/internal.py:1359 +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#: ipaserver/plugins/internal.py:1360 +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#: ipaserver/plugins/internal.py:1361 +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1362 +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#: ipaserver/plugins/internal.py:1363 +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1364 +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +#: ipaserver/plugins/internal.py:1365 +msgid "User categories" +msgstr "" + +#: ipaserver/plugins/internal.py:1368 +msgid "Add sudo command" +msgstr "" + +#: ipaserver/plugins/internal.py:1370 +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1374 +msgid "Remove sudo commands" +msgstr "" + +#: ipaserver/plugins/internal.py:1376 +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1381 +msgid "Add sudo command group" +msgstr "" + +#: ipaserver/plugins/internal.py:1383 +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1387 +msgid "Remove sudo command groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1389 +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1394 +msgid "Add sudo rule" +msgstr "" + +#: ipaserver/plugins/internal.py:1395 +msgid "Add sudo option" +msgstr "" + +#: ipaserver/plugins/internal.py:1397 +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1401 +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1405 +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1409 +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1413 +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1416 +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1419 +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1422 +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1425 +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1428 +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1431 +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1433 +msgid "Allow" +msgstr "" + +#: ipaserver/plugins/internal.py:1434 +msgid "Any Command" +msgstr "" + +#: ipaserver/plugins/internal.py:1435 +msgid "Any Group" +msgstr "" + +#: ipaserver/plugins/internal.py:1438 +msgid "Run Commands" +msgstr "" + +#: ipaserver/plugins/internal.py:1439 +msgid "Deny" +msgstr "" + +#: ipaserver/plugins/internal.py:1441 +msgid "Access this host" +msgstr "" + +#: ipaserver/plugins/internal.py:1443 +msgid "Option added" +msgstr "" + +#: ipaserver/plugins/internal.py:1444 +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +#: ipaserver/plugins/internal.py:1446 +msgid "Remove sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1448 +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1452 +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1456 +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1460 +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1464 +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1467 +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1470 +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1473 +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1476 +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1479 +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1482 +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1484 +msgid "As Whom" +msgstr "" + +#: ipaserver/plugins/internal.py:1485 +msgid "Specified Commands and Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1486 +msgid "Specified Groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1492 +msgid "Remove sudo options" +msgstr "" + +#: ipaserver/plugins/internal.py:1495 +msgid "Autogenerated" +msgstr "" + +#: ipaserver/plugins/internal.py:1496 +msgid "Segment details" +msgstr "" + +#: ipaserver/plugins/internal.py:1497 +msgid "Replication configuration" +msgstr "" + +#: ipaserver/plugins/internal.py:1498 +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +#: ipaserver/plugins/internal.py:1501 +msgid "Add IPA location" +msgstr "" + +#: ipaserver/plugins/internal.py:1503 +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1505 +msgid "Remove IPA locations" +msgstr "" + +#: ipaserver/plugins/internal.py:1507 +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1511 +msgid "Add topology segment" +msgstr "" + +#: ipaserver/plugins/internal.py:1512 +msgid "Remove topology segments" +msgstr "" + +#: ipaserver/plugins/internal.py:1515 +msgid "Account" +msgstr "" + +#: ipaserver/plugins/internal.py:1516 +msgid "Add trust" +msgstr "" + +#: ipaserver/plugins/internal.py:1517 +msgid "Administrative account" +msgstr "" + +#: ipaserver/plugins/internal.py:1518 +msgid "SID blocklists" +msgstr "" + +#: ipaserver/plugins/internal.py:1519 +msgid "Trust Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1521 +msgid "Establish using" +msgstr "" + +#: ipaserver/plugins/internal.py:1522 +msgid "Fetch domains" +msgstr "" + +#: ipaserver/plugins/internal.py:1525 +msgid "Pre-shared password" +msgstr "" + +#: ipaserver/plugins/internal.py:1526 +msgid "Remove trusts" +msgstr "" + +#: ipaserver/plugins/internal.py:1527 +msgid "Remove domains" +msgstr "" + +#: ipaserver/plugins/internal.py:1528 ipaserver/plugins/trust.py:556 +msgid "Trust direction" +msgstr "" + +#: ipaserver/plugins/internal.py:1529 ipaserver/plugins/trust.py:564 +msgid "Trust status" +msgstr "" + +#: ipaserver/plugins/internal.py:1530 ipaserver/plugins/trust.py:560 +msgid "Trust type" +msgstr "" + +#: ipaserver/plugins/internal.py:1531 +msgid "Alternative UPN suffixes" +msgstr "" + +#: ipaserver/plugins/internal.py:1535 +msgid "User attributes for SMB services" +msgstr "" + +#: ipaserver/plugins/internal.py:1538 +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +#: ipaserver/plugins/internal.py:1541 +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +#: ipaserver/plugins/internal.py:1544 +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#: ipaserver/plugins/internal.py:1547 +msgid "Drive to mount a home directory" +msgstr "" + +#: ipaserver/plugins/internal.py:1554 +msgid "Account Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1555 +msgid "Account Status" +msgstr "" + +#: ipaserver/plugins/internal.py:1556 +msgid "Active users" +msgstr "" + +#: ipaserver/plugins/internal.py:1557 +msgid "Add user" +msgstr "" + +#: ipaserver/plugins/internal.py:1559 +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1562 +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1565 +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1568 +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1571 +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1573 +msgid "Contact Settings" +msgstr "" + +#: ipaserver/plugins/internal.py:1574 +msgid "Delete mode" +msgstr "" + +#: ipaserver/plugins/internal.py:1575 +msgid "Employee Information" +msgstr "" + +#: ipaserver/plugins/internal.py:1576 +msgid "Error changing account status" +msgstr "" + +#: ipaserver/plugins/internal.py:1577 +msgid "Password expiration" +msgstr "" + +#: ipaserver/plugins/internal.py:1578 +msgid "Mailing Address" +msgstr "" + +#: ipaserver/plugins/internal.py:1579 +msgid "Misc. Information" +msgstr "" + +#: ipaserver/plugins/internal.py:1580 +msgid "delete" +msgstr "" + +#: ipaserver/plugins/internal.py:1581 +msgid "preserve" +msgstr "" + +#: ipaserver/plugins/internal.py:1582 +msgid "No private group" +msgstr "" + +#: ipaserver/plugins/internal.py:1583 +msgid "Remove users" +msgstr "" + +#: ipaserver/plugins/internal.py:1585 +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#: ipaserver/plugins/internal.py:1588 +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#: ipaserver/plugins/internal.py:1591 +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#: ipaserver/plugins/internal.py:1594 +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1597 +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#: ipaserver/plugins/internal.py:1599 +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#: ipaserver/plugins/internal.py:1600 +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +#: ipaserver/plugins/internal.py:1601 +msgid "Unlock" +msgstr "" + +#: ipaserver/plugins/internal.py:1602 +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +#: ipaserver/plugins/internal.py:1605 +msgid "Add vault" +msgstr "" + +#: ipaserver/plugins/internal.py:1607 +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1610 +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1613 +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1616 +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1619 +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1622 +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1625 +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +#: ipaserver/plugins/internal.py:1629 +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +#: ipaserver/plugins/internal.py:1632 +msgid "Asymmetric" +msgstr "" + +#: ipaserver/plugins/internal.py:1633 +msgid "Vaults Config" +msgstr "" + +#: ipaserver/plugins/internal.py:1635 +msgid "Members" +msgstr "" + +#: ipaserver/plugins/internal.py:1636 +msgid "My User Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1637 +msgid "Owners" +msgstr "" + +#: ipaserver/plugins/internal.py:1638 +msgid "Remove vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1640 +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1643 +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1646 +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1649 +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1652 +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1655 +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#: ipaserver/plugins/internal.py:1658 +msgid "Service Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1659 +msgid "Shared" +msgstr "" + +#: ipaserver/plugins/internal.py:1660 +msgid "Shared Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1661 +msgid "Standard" +msgstr "" + +#: ipaserver/plugins/internal.py:1662 +msgid "Symmetric" +msgstr "" + +#: ipaserver/plugins/internal.py:1663 +msgid "Vault Type" +msgstr "" + +#: ipaserver/plugins/internal.py:1665 +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#: ipaserver/plugins/internal.py:1669 +msgid "User Vaults" +msgstr "" + +#: ipaserver/plugins/internal.py:1674 +msgid "Current password is required" +msgstr "" + +#: ipaserver/plugins/internal.py:1675 +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#: ipaserver/plugins/internal.py:1676 +msgid "First OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1680 +msgid "New password is required" +msgstr "" + +#: ipaserver/plugins/internal.py:1683 +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +#: ipaserver/plugins/internal.py:1687 +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +#: ipaserver/plugins/internal.py:1692 +msgid "Token synchronization failed" +msgstr "" + +#: ipaserver/plugins/internal.py:1693 +msgid "The username, password or token codes are not correct" +msgstr "" + +#: ipaserver/plugins/internal.py:1694 +msgid "Token was synchronized" +msgstr "" + +#: ipaserver/plugins/internal.py:1697 +msgid "Password change complete" +msgstr "" + +#: ipaserver/plugins/internal.py:1699 +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#: ipaserver/plugins/internal.py:1700 +msgid "Passwords must match" +msgstr "" + +#: ipaserver/plugins/internal.py:1701 +msgid "Password reset was not successful." +msgstr "" + +#: ipaserver/plugins/internal.py:1703 +msgid "Reset your password." +msgstr "" + +#: ipaserver/plugins/internal.py:1704 +msgid "Second OTP" +msgstr "" + +#: ipaserver/plugins/internal.py:1706 +msgid "Verify Password" +msgstr "" + +#: ipaserver/plugins/internal.py:1716 +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1717 +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +#: ipaserver/plugins/internal.py:1718 +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1719 +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +#: ipaserver/plugins/internal.py:1720 +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#: ipaserver/plugins/internal.py:1721 +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +#: ipaserver/plugins/internal.py:1722 +msgid "Some entries were not deleted" +msgstr "" + +#: ipaserver/plugins/internal.py:1725 +msgid "Quick Links" +msgstr "" + +#: ipaserver/plugins/internal.py:1726 +msgid "Select All" +msgstr "" + +#: ipaserver/plugins/internal.py:1727 +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +#: ipaserver/plugins/internal.py:1728 +msgid "Unselect All" +msgstr "" + +#: ipaserver/plugins/internal.py:1732 +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1736 +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1748 +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1784 +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1796 +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1825 +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1870 +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1881 +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1918 +msgid "Working" +msgstr "" + +#: ipaserver/plugins/internal.py:1921 +msgid "Audit" +msgstr "" + +#: ipaserver/plugins/internal.py:1922 +msgid "Authentication" +msgstr "" + +#: ipaserver/plugins/internal.py:1923 ipaserver/plugins/automember.py:818 +msgid "Automember" +msgstr "" + +#: ipaserver/plugins/internal.py:1924 +msgid "Automount" +msgstr "" + +#: ipaserver/plugins/internal.py:1926 +msgid "DNS" +msgstr "" + +#: ipaserver/plugins/internal.py:1927 +msgid "Host-Based Access Control" +msgstr "" + +#: ipaserver/plugins/internal.py:1928 +msgid "Identity" +msgstr "" + +#: ipaserver/plugins/internal.py:1929 ipaserver/plugins/location.py:157 +#: ipaserver/plugins/server.py:71 +msgid "IPA Server" +msgstr "" + +#: ipaserver/plugins/internal.py:1930 +msgid "Network Services" +msgstr "" + +#: ipaserver/plugins/internal.py:1931 +msgid "Policy" +msgstr "" + +#: ipaserver/plugins/internal.py:1932 +msgid "Role-Based Access Control" +msgstr "" + +#: ipaserver/plugins/internal.py:1933 +msgid "Sudo" +msgstr "" + +#: ipaserver/plugins/internal.py:1934 +msgid "Topology" +msgstr "" + +#: ipaserver/plugins/internal.py:1935 ipaserver/plugins/trust.py:530 +msgid "Trusts" +msgstr "" + +#: ipaserver/plugins/internal.py:1937 +msgid "True" +msgstr "" + +#: ipaserver/plugins/internal.py:1939 +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +#: ipaserver/plugins/internal.py:1956 +msgid "API Browser" +msgstr "" + +#: ipaserver/plugins/internal.py:1957 +msgid "First" +msgstr "" + +#: ipaserver/plugins/internal.py:1958 +msgid "Last" +msgstr "" + +#: ipaserver/plugins/internal.py:1959 +msgid "Next" +msgstr "" + +#: ipaserver/plugins/internal.py:1960 +msgid "Page" +msgstr "" + +#: ipaserver/plugins/internal.py:1961 +msgid "Prev" +msgstr "" + +#: ipaserver/plugins/internal.py:1962 +msgid "Undo" +msgstr "" + +#: ipaserver/plugins/internal.py:1963 +msgid "Undo this change." +msgstr "" + +#: ipaserver/plugins/internal.py:1964 +msgid "Undo All" +msgstr "" + +#: ipaserver/plugins/internal.py:1965 +msgid "Undo all changes in this field." +msgstr "" + +#: ipaserver/plugins/internal.py:1967 +msgid "Text does not match field pattern" +msgstr "" + +#: ipaserver/plugins/internal.py:1968 +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#: ipaserver/plugins/internal.py:1969 +msgid "Must be a decimal number" +msgstr "" + +#: ipaserver/plugins/internal.py:1970 +msgid "Format error" +msgstr "" + +#: ipaserver/plugins/internal.py:1971 +msgid "Must be an integer" +msgstr "" + +#: ipaserver/plugins/internal.py:1972 +msgid "Not a valid IP address" +msgstr "" + +#: ipaserver/plugins/internal.py:1973 +msgid "Not a valid IPv4 address" +msgstr "" + +#: ipaserver/plugins/internal.py:1974 +msgid "Not a valid IPv6 address" +msgstr "" + +#: ipaserver/plugins/internal.py:1975 +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#: ipaserver/plugins/internal.py:1976 +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +#: ipaserver/plugins/internal.py:1977 +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#: ipaserver/plugins/internal.py:1978 +msgid "Parse error" +msgstr "" + +#: ipaserver/plugins/internal.py:1979 +msgid "Must be a positive number" +msgstr "" + +#: ipaserver/plugins/internal.py:1980 +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#: ipaserver/plugins/internal.py:1981 +msgid "Required field" +msgstr "" + +#: ipaserver/plugins/internal.py:1982 +msgid "Unsupported value" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:34 +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:67 +msgid "sudo command group" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:68 +msgid "sudo command groups" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:149 #, python-format -msgid "%(pkey)s: %(oname)s not found" +msgid "Added Sudo Command Group \"%(value)s\"" msgstr "" -#: ipaserver/plugins/schema.py:276 -msgid "Display information about a command." -msgstr "" - -#: ipaserver/plugins/schema.py:281 -msgid "Search for commands." -msgstr "" - -#: ipaserver/plugins/schema.py:286 -msgid "Return command defaults" -msgstr "" - -#: ipaserver/plugins/schema.py:343 -msgid "Display information about a class." -msgstr "" - -#: ipaserver/plugins/schema.py:348 -msgid "Search for classes." -msgstr "" - -#: ipaserver/plugins/schema.py:435 -msgid "Display information about a help topic." -msgstr "" - -#: ipaserver/plugins/schema.py:440 -msgid "Search for help topics." -msgstr "" - -#: ipaserver/plugins/schema.py:452 -msgid "Required" -msgstr "" - -#: ipaserver/plugins/schema.py:457 -msgid "Multi-value" -msgstr "" - -#: ipaserver/plugins/schema.py:505 -msgid "Always ask" -msgstr "" - -#: ipaserver/plugins/schema.py:510 -msgid "CLI metavar" -msgstr "" - -#: ipaserver/plugins/schema.py:515 -msgid "CLI name" -msgstr "" - -#: ipaserver/plugins/schema.py:520 -msgid "Confirm (password)" -msgstr "" - -#: ipaserver/plugins/schema.py:525 -msgid "Default" -msgstr "" - -#: ipaserver/plugins/schema.py:530 -msgid "Default from" -msgstr "" - -#: ipaserver/plugins/schema.py:535 -msgid "Label" -msgstr "" - -#: ipaserver/plugins/schema.py:540 -msgid "Convert on server" -msgstr "" - -#: ipaserver/plugins/schema.py:545 -msgid "Option group" -msgstr "" - -#: ipaserver/plugins/schema.py:550 -msgid "Sensitive" -msgstr "" - -#: ipaserver/plugins/schema.py:555 -msgid "Positional argument" -msgstr "" - -#: ipaserver/plugins/schema.py:640 +#: ipaserver/plugins/sudocmdgroup.py:157 #, python-format -msgid "%(metaobject)s: %(oname)s not found" +msgid "Deleted Sudo Command Group \"%(value)s\"" msgstr "" -#: ipaserver/plugins/schema.py:679 -msgid "Display information about a command parameter." -msgstr "" - -#: ipaserver/plugins/schema.py:684 -msgid "Search command parameters." -msgstr "" - -#: ipaserver/plugins/schema.py:741 +#: ipaserver/plugins/sudocmdgroup.py:165 #, python-format -msgid "%(command_name)s: %(oname)s not found" +msgid "Modified Sudo Command Group \"%(value)s\"" msgstr "" -#: ipaserver/plugins/schema.py:766 -msgid "Display information about a command output." +#: ipaserver/plugins/sudocmdgroup.py:174 +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/aci.py:165 +msgid "A list of ACI values" msgstr "" -#: ipaserver/plugins/schema.py:771 -msgid "Search for command outputs." +#: ipaserver/plugins/aci.py:229 +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" -#: ipaserver/plugins/schema.py:776 -msgid "Store and provide schema for commands and topics" +#: ipaserver/plugins/aci.py:232 +msgid "ACI prefix is required" msgstr "" -#: ipaserver/plugins/schema.py:782 -msgid "Fingerprint of schema cached by client" +#: ipaserver/plugins/aci.py:235 +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +#: ipaserver/plugins/aci.py:238 +msgid "filter and memberof are mutually exclusive" +msgstr "" + +#: ipaserver/plugins/aci.py:244 +msgid "group, permission and self are mutually exclusive" +msgstr "" + +#: ipaserver/plugins/aci.py:246 +msgid "One of group, permission or self is required" +msgstr "" + +#: ipaserver/plugins/aci.py:269 +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +#: ipaserver/plugins/aci.py:295 +msgid "empty filter" +msgstr "" + +#: ipaserver/plugins/aci.py:316 +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#: ipaserver/plugins/aci.py:361 +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#: ipaserver/plugins/aci.py:408 +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +#: ipaserver/plugins/aci.py:437 +msgid "ACI object." +msgstr "" + +#: ipaserver/plugins/aci.py:440 +msgid "ACIs" +msgstr "" + +#: ipaserver/plugins/aci.py:514 ipaserver/plugins/selfservice.py:94 +#: ipaserver/plugins/delegation.py:101 ipaserver/plugins/permission.py:359 +msgid "ACI" +msgstr "" + +#: ipaserver/plugins/aci.py:524 +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/aci.py:577 +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/aci.py:620 +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/aci.py:694 +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/aci.py:929 +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/join.py:125 +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:86 +msgid "kerberos ticket policy settings" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:152 +msgid "OTP max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:153 +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:157 +msgid "OTP max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:158 +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:162 +msgid "RADIUS max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:163 +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:167 +msgid "RADIUS max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:168 +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:172 +msgid "PKINIT max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:173 +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:177 +msgid "PKINIT max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:178 +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:182 +msgid "Hardened max life" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:183 +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:187 +msgid "Hardened max renew" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:188 +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:272 +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +#: ipaserver/plugins/krbtpolicy.py:292 +msgid "Default ticket policy could not be read" msgstr "" #: ipaserver/plugins/servicedelegation.py:26 @@ -14337,6 +18900,1700 @@ msgid_plural "%(count)d service delegation targets matched" msgstr[0] "" msgstr[1] "" +#: ipaserver/plugins/ldap2.py:277 +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:35 +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:37 +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:39 +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:45 +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:48 +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:51 +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:54 +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:57 +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:68 +msgid "invalid attribute name" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:80 +msgid "invalid port number" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:98 +msgid "RADIUS proxy server" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:99 +msgid "RADIUS proxy servers" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:106 +msgid "RADIUS Servers" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:107 +msgid "RADIUS Server" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:172 +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:177 +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:182 +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/radiusproxy.py:188 +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/vault.py:54 +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#: ipaserver/plugins/vault.py:56 +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:58 +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:62 +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +#: ipaserver/plugins/vault.py:67 +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:72 +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +#: ipaserver/plugins/vault.py:78 +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:82 +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:86 +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +#: ipaserver/plugins/vault.py:92 +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:96 +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +#: ipaserver/plugins/vault.py:101 +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +#: ipaserver/plugins/vault.py:106 +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +#: ipaserver/plugins/vault.py:111 +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:115 +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +#: ipaserver/plugins/vault.py:120 +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:127 +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +#: ipaserver/plugins/vault.py:140 +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +#: ipaserver/plugins/vault.py:146 +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:150 +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +#: ipaserver/plugins/vault.py:153 +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +#: ipaserver/plugins/vault.py:158 +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +#: ipaserver/plugins/vault.py:164 +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +#: ipaserver/plugins/vault.py:169 +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +#: ipaserver/plugins/vault.py:174 +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +#: ipaserver/plugins/vault.py:180 +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +#: ipaserver/plugins/vault.py:185 +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:190 +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:195 +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:200 +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#: ipaserver/plugins/vault.py:252 +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#: ipaserver/plugins/vault.py:258 +msgid "vaultcontainer" +msgstr "" + +#: ipaserver/plugins/vault.py:259 +msgid "vaultcontainers" +msgstr "" + +#: ipaserver/plugins/vault.py:267 +msgid "Vault Containers" +msgstr "" + +#: ipaserver/plugins/vault.py:268 +msgid "Vault Container" +msgstr "" + +#: ipaserver/plugins/vault.py:357 +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#: ipaserver/plugins/vault.py:367 ipaserver/plugins/vault.py:683 +msgid "Host is not supported" +msgstr "" + +#: ipaserver/plugins/vault.py:409 ipaserver/plugins/vault.py:433 +#: ipaserver/plugins/vault.py:786 ipaserver/plugins/vault.py:824 +#: ipaserver/plugins/vault.py:880 ipaserver/plugins/vault.py:936 +#: ipaserver/plugins/vault.py:958 ipaserver/plugins/vault.py:1000 +#: ipaserver/plugins/vault.py:1044 ipaserver/plugins/vault.py:1113 +msgid "KRA service is not enabled" +msgstr "" + +#: ipaserver/plugins/vault.py:424 +msgid "Deleted vault container" +msgstr "" + +#: ipaserver/plugins/vault.py:449 ipaserver/plugins/vault.py:474 +#: ipaserver/plugins/vault.py:1164 ipaserver/plugins/vault.py:1189 +#, python-format +msgid "owner %s" +msgstr "" + +#: ipaserver/plugins/vault.py:494 +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +#: ipaserver/plugins/vault.py:500 +msgid "vault" +msgstr "" + +#: ipaserver/plugins/vault.py:501 +msgid "vaults" +msgstr "" + +#: ipaserver/plugins/vault.py:524 +msgid "Vaults" +msgstr "" + +#: ipaserver/plugins/vault.py:525 +msgid "Vault" +msgstr "" + +#: ipaserver/plugins/vault.py:668 +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#: ipaserver/plugins/vault.py:772 +msgid "Add a vault." +msgstr "" + +#: ipaserver/plugins/vault.py:778 +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:817 +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:869 +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/vault.py:887 +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#: ipaserver/plugins/vault.py:927 +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:969 +msgid "Vault configuration" +msgstr "" + +#: ipaserver/plugins/vault.py:978 ipaserver/plugins/config.py:302 +msgid "IPA KRA servers" +msgstr "" + +#: ipaserver/plugins/vault.py:979 +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#: ipaserver/plugins/vault.py:1038 +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:1094 +msgid "Retrieve data from a vault." +msgstr "" + +#: ipaserver/plugins/vault.py:1107 +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/vault.py:1133 +msgid "No archived data." +msgstr "" + +#: ipaserver/plugins/vault.py:1223 +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#: ipaserver/plugins/ca.py:20 +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +#: ipaserver/plugins/ca.py:22 +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:25 +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:28 +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:32 +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +#: ipaserver/plugins/ca.py:37 +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +#: ipaserver/plugins/ca.py:43 +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:47 +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:51 +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#: ipaserver/plugins/ca.py:68 ipaserver/plugins/ca.py:78 +msgid "Certificate Authority" +msgstr "" + +#: ipaserver/plugins/ca.py:69 ipaserver/plugins/ca.py:77 +msgid "Certificate Authorities" +msgstr "" + +#: ipaserver/plugins/ca.py:84 ipaserver/plugins/schema.py:54 +#: ipaserver/plugins/trust.py:1418 +msgid "Name" +msgstr "" + +#: ipaserver/plugins/ca.py:85 +msgid "Name for referencing the CA" +msgstr "" + +#: ipaserver/plugins/ca.py:90 +msgid "Description of the purpose of the CA" +msgstr "" + +#: ipaserver/plugins/ca.py:94 +msgid "Authority ID" +msgstr "" + +#: ipaserver/plugins/ca.py:95 +msgid "Dogtag Authority ID" +msgstr "" + +#: ipaserver/plugins/ca.py:100 ipaserver/plugins/ca.py:286 +msgid "Subject DN" +msgstr "" + +#: ipaserver/plugins/ca.py:101 +msgid "Subject Distinguished Name" +msgstr "" + +#: ipaserver/plugins/ca.py:106 ipaserver/plugins/cert.py:426 +msgid "Issuer DN" +msgstr "" + +#: ipaserver/plugins/ca.py:107 +msgid "Issuer Distinguished Name" +msgstr "" + +#: ipaserver/plugins/ca.py:113 ipaserver/plugins/cert.py:354 +msgid "Base-64 encoded certificate." +msgstr "" + +#: ipaserver/plugins/ca.py:118 ipaserver/plugins/cert.py:359 +msgid "Certificate chain" +msgstr "" + +#: ipaserver/plugins/ca.py:119 ipaserver/plugins/cert.py:360 +msgid "X.509 certificate chain" +msgstr "" + +#: ipaserver/plugins/ca.py:218 +msgid "Search for CAs." +msgstr "" + +#: ipaserver/plugins/ca.py:220 +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/ca.py:237 ipaserver/plugins/cert.py:599 +msgid "Include certificate chain in output" +msgstr "" + +#: ipaserver/plugins/ca.py:243 +msgid "Display the properties of a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:260 +msgid "Create a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:261 +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:271 +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#: ipaserver/plugins/ca.py:287 +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#: ipaserver/plugins/ca.py:302 +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +#: ipaserver/plugins/ca.py:326 +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#: ipaserver/plugins/ca.py:328 +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:337 +msgid "Insufficient privilege to delete a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:343 +msgid "IPA CA cannot be deleted" +msgstr "" + +#: ipaserver/plugins/ca.py:352 +msgid "Must be disabled first" +msgstr "" + +#: ipaserver/plugins/ca.py:360 +msgid "Modify CA configuration." +msgstr "" + +#: ipaserver/plugins/ca.py:361 +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:387 +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:403 +msgid "Disable a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:404 +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/ca.py:411 +msgid "IPA CA cannot be disabled" +msgstr "" + +#: ipaserver/plugins/ca.py:421 +msgid "Enable a CA." +msgstr "" + +#: ipaserver/plugins/ca.py:422 +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/virtual.py:57 +msgid "operation not defined" +msgstr "" + +#: ipaserver/plugins/virtual.py:82 +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +#: ipaserver/plugins/virtual.py:84 +msgid "No such virtual command" +msgstr "" + +#: ipaserver/plugins/location.py:33 +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +#: ipaserver/plugins/location.py:35 +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +#: ipaserver/plugins/location.py:39 +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +#: ipaserver/plugins/location.py:42 +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +#: ipaserver/plugins/location.py:45 +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +#: ipaserver/plugins/location.py:48 +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#: ipaserver/plugins/location.py:62 +msgid "location" +msgstr "" + +#: ipaserver/plugins/location.py:63 +msgid "locations" +msgstr "" + +#: ipaserver/plugins/location.py:69 +msgid "IPA Locations" +msgstr "" + +#: ipaserver/plugins/location.py:70 +msgid "IPA Location" +msgstr "" + +#: ipaserver/plugins/location.py:103 +msgid "Location name" +msgstr "" + +#: ipaserver/plugins/location.py:104 +msgid "IPA location name" +msgstr "" + +#: ipaserver/plugins/location.py:112 +msgid "IPA Location description" +msgstr "" + +#: ipaserver/plugins/location.py:116 +msgid "Servers" +msgstr "" + +#: ipaserver/plugins/location.py:117 +msgid "Servers that belongs to the IPA location" +msgstr "" + +#: ipaserver/plugins/location.py:122 +msgid "Advertised by servers" +msgstr "" + +#: ipaserver/plugins/location.py:123 +msgid "List of servers which advertise the given location" +msgstr "" + +#: ipaserver/plugins/location.py:138 +msgid "Add a new IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:140 +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/location.py:145 +msgid "Delete an IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:147 +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/location.py:170 +msgid "Modify information about an IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:172 +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/location.py:177 +msgid "Search for IPA locations." +msgstr "" + +#: ipaserver/plugins/location.py:180 +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/location.py:187 +msgid "Display information about an IPA location." +msgstr "" + +#: ipaserver/plugins/location.py:193 +msgid "Servers in location" +msgstr "" + +#: ipaserver/plugins/privilege.py:76 +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:149 +msgid "Privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:169 +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:176 +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:183 +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:191 +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/serverroles.py:84 +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#: ipaserver/plugins/serverroles.py:178 +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +#: ipaserver/plugins/host.py:74 +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +#: ipaserver/plugins/host.py:82 +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +#: ipaserver/plugins/host.py:94 +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +#: ipaserver/plugins/host.py:106 +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +#: ipaserver/plugins/host.py:109 +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:112 +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:115 +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:118 +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:121 +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:124 +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:127 +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +#: ipaserver/plugins/host.py:130 +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#: ipaserver/plugins/host.py:509 +msgid "Base-64 encoded host certificate" +msgstr "" + +#: ipaserver/plugins/host.py:528 ipaserver/plugins/service.py:513 +#: ipaserver/plugins/cert.py:431 +msgid "Not Before" +msgstr "" + +#: ipaserver/plugins/host.py:532 ipaserver/plugins/service.py:517 +#: ipaserver/plugins/cert.py:436 +msgid "Not After" +msgstr "" + +#: ipaserver/plugins/host.py:536 ipaserver/plugins/service.py:521 +#: ipaserver/plugins/cert.py:441 +msgid "Fingerprint (SHA1)" +msgstr "" + +#: ipaserver/plugins/host.py:540 ipaserver/plugins/service.py:525 +#: ipaserver/plugins/cert.py:446 +msgid "Fingerprint (SHA256)" +msgstr "" + +#: ipaserver/plugins/host.py:557 ipaserver/plugins/service.py:484 +#: ipaserver/plugins/baseuser.py:257 +msgid "Principal alias" +msgstr "" + +#: ipaserver/plugins/host.py:576 ipaserver/plugins/baseuser.py:353 +msgid "SSH public key fingerprint" +msgstr "" + +#: ipaserver/plugins/host.py:592 ipaserver/plugins/service.py:543 +msgid "Authentication Indicators" +msgstr "" + +#: ipaserver/plugins/host.py:593 ipaserver/plugins/service.py:544 +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#: ipaserver/plugins/host.py:663 +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:687 ipaserver/plugins/user.py:561 +#: ipaserver/plugins/stageuser.py:329 ipaserver/plugins/stageuser.py:533 +#: ipaserver/plugins/baseuser.py:569 +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#: ipaserver/plugins/host.py:785 +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:790 +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +#: ipaserver/plugins/host.py:869 +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#: ipaserver/plugins/host.py:885 +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:905 +msgid "Password cannot be set on enrolled host." +msgstr "" + +#: ipaserver/plugins/host.py:909 +msgid "cn is immutable" +msgstr "" + +#: ipaserver/plugins/host.py:1033 +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/host.py:1188 +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1363 +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1370 +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1386 +msgid "Add new principal alias to host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1387 +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:1398 +msgid "Remove principal alias from a host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1399 +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selfservice.py:68 +msgid "self service permission" +msgstr "" + +#: ipaserver/plugins/selfservice.py:69 +msgid "self service permissions" +msgstr "" + +#: ipaserver/plugins/selfservice.py:70 +msgid "Self Service Permissions" +msgstr "" + +#: ipaserver/plugins/selfservice.py:71 +msgid "Self Service Permission" +msgstr "" + +#: ipaserver/plugins/selfservice.py:124 +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selfservice.py:146 +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selfservice.py:163 +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selfservice.py:185 +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/migration.py:46 +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#: ipaserver/plugins/migration.py:145 +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#: ipaserver/plugins/migration.py:146 +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +#: ipaserver/plugins/migration.py:147 +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +#: ipaserver/plugins/migration.py:148 +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +#: ipaserver/plugins/migration.py:149 +msgid "Malformed DN" +msgstr "" + +#: ipaserver/plugins/migration.py:194 +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +#: ipaserver/plugins/migration.py:461 +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#: ipaserver/plugins/migration.py:476 +msgid "Invalid LDAP URI." +msgstr "" + +#: ipaserver/plugins/migration.py:678 +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +#: ipaserver/plugins/migration.py:680 +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#: ipaserver/plugins/migration.py:769 +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#: ipaserver/plugins/migration.py:804 ipaserver/plugins/user.py:591 +msgid "Default group for new users not found" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:35 +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:107 +msgid "host groups" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:179 +msgid "Host Group" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:223 +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:239 +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:262 +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:266 ipaserver/plugins/hostgroup.py:284 +#: ipaserver/plugins/hostgroup.py:349 +msgid "hostgroup" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:268 ipaserver/plugins/hostgroup.py:286 +msgid "privileged hostgroup" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:278 +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hostgroup.py:303 +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/hostgroup.py:362 +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +#: ipaserver/plugins/hostgroup.py:372 +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +#: ipaserver/plugins/otptoken.py:42 +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:44 +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:46 +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:51 +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:54 +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:57 +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:60 +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:137 +msgid "OTP token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:138 +msgid "OTP tokens" +msgstr "" + +#: ipaserver/plugins/otptoken.py:154 +msgid "OTP Tokens" +msgstr "" + +#: ipaserver/plugins/otptoken.py:155 +msgid "OTP Token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:272 +msgid "URI" +msgstr "" + +#: ipaserver/plugins/otptoken.py:281 +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:335 +msgid "cannot be empty" +msgstr "" + +#: ipaserver/plugins/otptoken.py:367 +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:373 +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:422 +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/automount.py:218 +msgid "automount location" +msgstr "" + +#: ipaserver/plugins/automount.py:219 +msgid "automount locations" +msgstr "" + +#: ipaserver/plugins/automount.py:222 +msgid "Automount Locations" +msgstr "" + +#: ipaserver/plugins/automount.py:223 +msgid "Automount Location" +msgstr "" + +#: ipaserver/plugins/automount.py:263 +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:283 +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:296 +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/automount.py:349 +msgid "automount map" +msgstr "" + +#: ipaserver/plugins/automount.py:350 +msgid "automount maps" +msgstr "" + +#: ipaserver/plugins/automount.py:393 +msgid "Automount Maps" +msgstr "" + +#: ipaserver/plugins/automount.py:394 +msgid "Automount Map" +msgstr "" + +#: ipaserver/plugins/automount.py:401 +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:408 +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:428 +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:436 +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/automount.py:448 +msgid "Automount key object." +msgstr "" + +#: ipaserver/plugins/automount.py:452 +msgid "automount key" +msgstr "" + +#: ipaserver/plugins/automount.py:453 +msgid "automount keys" +msgstr "" + +#: ipaserver/plugins/automount.py:512 +msgid "Automount Keys" +msgstr "" + +#: ipaserver/plugins/automount.py:513 +msgid "Automount Key" +msgstr "" + +#: ipaserver/plugins/automount.py:514 +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#: ipaserver/plugins/automount.py:515 +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#: ipaserver/plugins/automount.py:516 +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#: ipaserver/plugins/automount.py:566 +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#: ipaserver/plugins/automount.py:625 +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:654 +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:678 +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#: ipaserver/plugins/automount.py:707 +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:748 +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/automount.py:807 +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + #: ipaserver/plugins/service.py:60 msgid "" "\n" @@ -14435,11 +20692,6 @@ msgstr "" msgid "services" msgstr "" -#: ipaserver/plugins/service.py:484 ipaserver/plugins/host.py:557 -#: ipaserver/plugins/baseuser.py:257 -msgid "Principal alias" -msgstr "" - #: ipaserver/plugins/service.py:485 msgid "Service principal alias" msgstr "" @@ -14448,68 +20700,6 @@ msgstr "" msgid "Base-64 encoded service certificate" msgstr "" -#: ipaserver/plugins/service.py:497 ipaserver/plugins/cert.py:365 -#: ipaserver/plugins/cert.py:1502 ipaserver/plugins/internal.py:653 -#: ipaserver/plugins/internal.py:729 ipaserver/plugins/host.py:512 -#: ipaserver/plugins/baseuser.py:833 -msgid "Subject" -msgstr "" - -#: ipaserver/plugins/service.py:501 ipaserver/plugins/internal.py:696 -#: ipaserver/plugins/host.py:516 -msgid "Serial Number" -msgstr "" - -#: ipaserver/plugins/service.py:505 ipaserver/plugins/internal.py:697 -#: ipaserver/plugins/host.py:520 -msgid "Serial Number (hex)" -msgstr "" - -#: ipaserver/plugins/service.py:509 ipaserver/plugins/cert.py:425 -#: ipaserver/plugins/internal.py:726 ipaserver/plugins/host.py:524 -#: ipaserver/plugins/baseuser.py:826 -msgid "Issuer" -msgstr "" - -#: ipaserver/plugins/service.py:513 ipaserver/plugins/cert.py:431 -#: ipaserver/plugins/host.py:528 -msgid "Not Before" -msgstr "" - -#: ipaserver/plugins/service.py:517 ipaserver/plugins/cert.py:436 -#: ipaserver/plugins/host.py:532 -msgid "Not After" -msgstr "" - -#: ipaserver/plugins/service.py:521 ipaserver/plugins/cert.py:441 -#: ipaserver/plugins/host.py:536 -msgid "Fingerprint (SHA1)" -msgstr "" - -#: ipaserver/plugins/service.py:525 ipaserver/plugins/cert.py:446 -#: ipaserver/plugins/host.py:540 -msgid "Fingerprint (SHA256)" -msgstr "" - -#: ipaserver/plugins/service.py:529 ipaserver/plugins/cert.py:1283 -#: ipaserver/plugins/internal.py:650 ipaserver/plugins/internal.py:691 -#: ipaserver/plugins/host.py:544 -msgid "Revocation reason" -msgstr "" - -#: ipaserver/plugins/service.py:543 ipaserver/plugins/host.py:592 -msgid "Authentication Indicators" -msgstr "" - -#: ipaserver/plugins/service.py:544 ipaserver/plugins/host.py:593 -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - #: ipaserver/plugins/service.py:569 msgid "NONE value cannot be combined with other PAC types" msgstr "" @@ -14599,223 +20789,275 @@ msgstr "" msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "" -#: ipaserver/plugins/sudorule.py:43 +#: ipaserver/plugins/caacl.py:21 msgid "" "\n" -"Sudo Rules\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:45 -msgid "" +"Manage CA ACL rules.\n" "\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:50 -msgid "" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" "\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:59 -msgid "" +"SUBJECT PRINCIPAL SCOPE:\n" "\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:63 -msgid "" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" "\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:66 -msgid "" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" "\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:73 -msgid "" +"CERTIFICATE AUTHORITY SCOPE:\n" "\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:76 -msgid "" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" "\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:80 -msgid "" +"PROFILE SCOPE:\n" "\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:83 -msgid "" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" "\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:86 -msgid "" +"EXAMPLES:\n" "\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:89 -msgid "" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" "\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:92 -msgid "" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" "\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" msgstr "" -#: ipaserver/plugins/sudorule.py:111 -msgid "this option has been deprecated." +#: ipaserver/plugins/caacl.py:87 ipaserver/plugins/caacl.py:165 +#: ipaserver/plugins/caacl.py:263 +msgid "CA ACL" msgstr "" -#: ipaserver/plugins/sudorule.py:139 -msgid "sudo rules" +#: ipaserver/plugins/caacl.py:88 ipaserver/plugins/caacl.py:164 +msgid "CA ACLs" msgstr "" -#: ipaserver/plugins/sudorule.py:227 -msgid "Sudo Rules" +#: ipaserver/plugins/caacl.py:183 +msgid "CA category" msgstr "" -#: ipaserver/plugins/sudorule.py:228 -msgid "Sudo Rule" +#: ipaserver/plugins/caacl.py:184 +msgid "CA category the ACL applies to" msgstr "" -#: ipaserver/plugins/sudorule.py:363 +#: ipaserver/plugins/caacl.py:212 +msgid "CAs" +msgstr "" + +#: ipaserver/plugins/caacl.py:246 #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "Added CA ACL \"%(value)s\"" msgstr "" -#: ipaserver/plugins/sudorule.py:394 +#: ipaserver/plugins/caacl.py:258 #, python-format -msgid "Added Sudo Rule \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" msgstr "" -#: ipaserver/plugins/sudorule.py:401 -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" +#: ipaserver/plugins/caacl.py:265 +msgid "default CA ACL can be only disabled" msgstr "" -#: ipaserver/plugins/sudorule.py:408 +#: ipaserver/plugins/caacl.py:273 #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" msgstr "" -#: ipaserver/plugins/sudorule.py:427 -#, python-format +#: ipaserver/plugins/caacl.py:285 +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +#: ipaserver/plugins/caacl.py:290 msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"profile category cannot be set to 'all' while there are allowed profiles" msgstr "" -#: ipaserver/plugins/sudorule.py:433 ipaserver/plugins/user.py:163 -msgid "users" +#: ipaserver/plugins/caacl.py:294 ipaserver/plugins/netgroup.py:321 +#: ipaserver/plugins/hbacrule.py:345 +msgid "user category cannot be set to 'all' while there are allowed users" msgstr "" -#: ipaserver/plugins/sudorule.py:443 -msgid "command" +#: ipaserver/plugins/caacl.py:298 ipaserver/plugins/netgroup.py:326 +#: ipaserver/plugins/hbacrule.py:350 +msgid "host category cannot be set to 'all' while there are allowed hosts" msgstr "" -#: ipaserver/plugins/sudorule.py:443 -msgid "commands" +#: ipaserver/plugins/caacl.py:302 ipaserver/plugins/hbacrule.py:356 +msgid "" +"service category cannot be set to 'all' while there are allowed services" msgstr "" -#: ipaserver/plugins/sudorule.py:449 -msgid "runAs user" -msgstr "" - -#: ipaserver/plugins/sudorule.py:449 -msgid "runAs users" -msgstr "" - -#: ipaserver/plugins/sudorule.py:454 -msgid "group runAs" -msgstr "" - -#: ipaserver/plugins/sudorule.py:454 -msgid "runAs groups" -msgstr "" - -#: ipaserver/plugins/sudorule.py:475 +#: ipaserver/plugins/caacl.py:312 #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/sudorule.py:547 -msgid "commands cannot be added when command category='all'" +#: ipaserver/plugins/caacl.py:325 +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" msgstr "" -#: ipaserver/plugins/sudorule.py:598 ipaserver/plugins/caacl.py:397 -#: ipaserver/plugins/selinuxusermap.py:564 ipaserver/plugins/hbacrule.py:518 +#: ipaserver/plugins/caacl.py:354 +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/caacl.py:385 +#, python-format +msgid "%i user or group added." +msgstr "" + +#: ipaserver/plugins/caacl.py:386 +#, python-format +msgid "%i users or groups added." +msgstr "" + +#: ipaserver/plugins/caacl.py:397 ipaserver/plugins/selinuxusermap.py:572 +#: ipaserver/plugins/sudorule.py:598 ipaserver/plugins/hbacrule.py:518 msgid "users cannot be added when user category='all'" msgstr "" -#: ipaserver/plugins/sudorule.py:701 ipaserver/plugins/caacl.py:429 -#: ipaserver/plugins/selinuxusermap.py:597 ipaserver/plugins/hbacrule.py:549 +#: ipaserver/plugins/caacl.py:407 +#, python-format +msgid "%i user or group removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:408 +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:417 +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#: ipaserver/plugins/caacl.py:418 +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +#: ipaserver/plugins/caacl.py:429 ipaserver/plugins/selinuxusermap.py:605 +#: ipaserver/plugins/sudorule.py:701 ipaserver/plugins/hbacrule.py:549 msgid "hosts cannot be added when host category='all'" msgstr "" -#: ipaserver/plugins/sudorule.py:809 ipaserver/plugins/sudorule.py:931 -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#: ipaserver/plugins/sudorule.py:816 +#: ipaserver/plugins/caacl.py:439 #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "%i host or hostgroup removed." msgstr "" -#: ipaserver/plugins/sudorule.py:824 +#: ipaserver/plugins/caacl.py:440 #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "%i hosts or hostgroups removed." msgstr "" -#: ipaserver/plugins/sudorule.py:938 +#: ipaserver/plugins/caacl.py:448 #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "%i service added." msgstr "" -#: ipaserver/plugins/cert.py:64 ipaserver/plugins/hbactest.py:39 -msgid "pyhbac is not installed." +#: ipaserver/plugins/caacl.py:448 +#, python-format +msgid "%i services added." +msgstr "" + +#: ipaserver/plugins/caacl.py:459 ipaserver/plugins/hbacrule.py:606 +msgid "services cannot be added when service category='all'" +msgstr "" + +#: ipaserver/plugins/caacl.py:468 +#, python-format +msgid "%i service removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:468 +#, python-format +msgid "%i services removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:488 +#, python-format +msgid "%i profile added." +msgstr "" + +#: ipaserver/plugins/caacl.py:488 +#, python-format +msgid "%i profiles added." +msgstr "" + +#: ipaserver/plugins/caacl.py:499 +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#: ipaserver/plugins/caacl.py:510 +#, python-format +msgid "%i profile removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:510 +#, python-format +msgid "%i profiles removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:515 +msgid "Add CAs to a CA ACL." +msgstr "" + +#: ipaserver/plugins/caacl.py:520 +#, python-format +msgid "%i CA added." +msgstr "" + +#: ipaserver/plugins/caacl.py:520 +#, python-format +msgid "%i CAs added." +msgstr "" + +#: ipaserver/plugins/caacl.py:531 +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +#: ipaserver/plugins/caacl.py:537 +msgid "Remove CAs from a CA ACL." +msgstr "" + +#: ipaserver/plugins/caacl.py:542 +#, python-format +msgid "%i CA removed." +msgstr "" + +#: ipaserver/plugins/caacl.py:542 +#, python-format +msgid "%i CAs removed." msgstr "" #: ipaserver/plugins/cert.py:69 @@ -15071,18 +21313,6 @@ msgstr "" msgid "Name of issuing CA" msgstr "" -#: ipaserver/plugins/cert.py:354 ipaserver/plugins/ca.py:113 -msgid "Base-64 encoded certificate." -msgstr "" - -#: ipaserver/plugins/cert.py:359 ipaserver/plugins/ca.py:118 -msgid "Certificate chain" -msgstr "" - -#: ipaserver/plugins/cert.py:360 ipaserver/plugins/ca.py:119 -msgid "X.509 certificate chain" -msgstr "" - #: ipaserver/plugins/cert.py:370 msgid "Subject email address" msgstr "" @@ -15127,10 +21357,6 @@ msgstr "" msgid "Subject Other Name" msgstr "" -#: ipaserver/plugins/cert.py:426 ipaserver/plugins/ca.py:106 -msgid "Issuer DN" -msgstr "" - #: ipaserver/plugins/cert.py:458 msgid "Serial number (hex)" msgstr "" @@ -15139,10 +21365,6 @@ msgstr "" msgid "Request status" msgstr "" -#: ipaserver/plugins/cert.py:599 ipaserver/plugins/ca.py:237 -msgid "Include certificate chain in output" -msgstr "" - #: ipaserver/plugins/cert.py:630 msgid "" "automatically add the principal if it doesn't exist (service principals only)" @@ -15251,12 +21473,6 @@ msgstr "" msgid "PTR record for SAN IP (%s) does not match A/AAAA records" msgstr "" -#: ipaserver/plugins/cert.py:1273 ipaserver/plugins/internal.py:700 -#: ipaserver/plugins/internal.py:1030 ipaserver/plugins/internal.py:1332 -#: ipaserver/plugins/internal.py:1916 -msgid "Status" -msgstr "" - #: ipaserver/plugins/cert.py:1278 msgid "Revoked" msgstr "" @@ -15283,22 +21499,26 @@ msgid "7 is not a valid revocation reason" msgstr "" #: ipaserver/plugins/cert.py:1564 +msgid "Status of the certificate" +msgstr "" + +#: ipaserver/plugins/cert.py:1570 msgid "Results should contain primary key attribute only (\"certificate\")" msgstr "" -#: ipaserver/plugins/cert.py:1580 +#: ipaserver/plugins/cert.py:1586 #, python-format msgid "%(count)d certificate matched" msgid_plural "%(count)d certificates matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/cert.py:1602 +#: ipaserver/plugins/cert.py:1608 #, python-format msgid "Search for certificates with these owner %s." msgstr "" -#: ipaserver/plugins/cert.py:1613 +#: ipaserver/plugins/cert.py:1619 #, python-format msgid "Search for certificates without these owner %s." msgstr "" @@ -15695,10 +21915,6 @@ msgstr "" msgid "Renewal master for IPA certificate authority" msgstr "" -#: ipaserver/plugins/config.py:302 ipaserver/plugins/vault.py:978 -msgid "IPA KRA servers" -msgstr "" - #: ipaserver/plugins/config.py:303 msgid "IPA servers configured as key recovery agent" msgstr "" @@ -15719,7 +21935,7 @@ msgstr "" msgid "colon-separated list of domains used for short name qualification" msgstr "" -#: ipaserver/plugins/config.py:321 ipaserver/plugins/dns.py:4119 +#: ipaserver/plugins/config.py:321 ipaserver/plugins/dns.py:4126 msgid "IPA DNS servers" msgstr "" @@ -15735,7 +21951,7 @@ msgstr "" msgid "Hidden IPA servers configured as domain name server" msgstr "" -#: ipaserver/plugins/config.py:333 ipaserver/plugins/dns.py:4125 +#: ipaserver/plugins/config.py:333 ipaserver/plugins/dns.py:4132 msgid "IPA DNSSec key master" msgstr "" @@ -15793,5445 +22009,6 @@ msgstr "" msgid "SELinux user map default user not in order list" msgstr "" -#: ipaserver/plugins/sudocmdgroup.py:34 -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:67 -msgid "sudo command group" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:68 -msgid "sudo command groups" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:149 -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:157 -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:165 -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:174 -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hostgroup.py:35 -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:107 -msgid "host groups" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:179 -msgid "Host Group" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:223 -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:239 -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:262 -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:266 ipaserver/plugins/hostgroup.py:284 -#: ipaserver/plugins/hostgroup.py:349 -msgid "hostgroup" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:268 ipaserver/plugins/hostgroup.py:286 -msgid "privileged hostgroup" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:278 -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:303 -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hostgroup.py:362 -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:372 -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#: ipaserver/plugins/join.py:125 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1243 -msgid "REST API is not logged in." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1265 -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1291 -msgid "Unable to communicate with CMS" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1482 ipaserver/plugins/dogtag.py:1568 -#: ipaserver/plugins/dogtag.py:2074 ipaserver/plugins/dogtag.py:2084 -msgid "Response from CA was not valid JSON" -msgstr "" - -#: ipaserver/plugins/passwd.py:40 -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#: ipaserver/plugins/passwd.py:114 -msgid "The OTP if the user has a token configured" -msgstr "" - -#: ipaserver/plugins/passwd.py:120 -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/permission.py:40 -msgid "" -"\n" -"Permissions\n" -msgstr "" - -#: ipaserver/plugins/permission.py:42 -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:48 -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:50 -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:56 -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:62 -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -#: ipaserver/plugins/permission.py:72 -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:76 -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -#: ipaserver/plugins/permission.py:81 -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:88 -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -#: ipaserver/plugins/permission.py:90 -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:94 -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:99 -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -#: ipaserver/plugins/permission.py:102 -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#: ipaserver/plugins/permission.py:129 -msgid "must be enclosed in parentheses" -msgstr "" - -#: ipaserver/plugins/permission.py:149 -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#: ipaserver/plugins/permission.py:151 ipaserver/plugins/permission.py:897 -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#: ipaserver/plugins/permission.py:353 -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#: ipaserver/plugins/permission.py:359 ipaserver/plugins/selfservice.py:94 -#: ipaserver/plugins/aci.py:514 ipaserver/plugins/delegation.py:101 -msgid "ACI" -msgstr "" - -#: ipaserver/plugins/permission.py:370 -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -#: ipaserver/plugins/permission.py:374 -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#: ipaserver/plugins/permission.py:624 -#, python-format -msgid "Entry %s not found" -msgstr "" - -#: ipaserver/plugins/permission.py:716 -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -#: ipaserver/plugins/permission.py:820 -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#: ipaserver/plugins/permission.py:843 -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#: ipaserver/plugins/permission.py:847 -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#: ipaserver/plugins/permission.py:861 ipaserver/plugins/permission.py:876 -#, python-format -msgid "%s: group not found" -msgstr "" - -#: ipaserver/plugins/permission.py:871 -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:892 -msgid "subtree and type are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:930 -msgid "Bad search filter" -msgstr "" - -#: ipaserver/plugins/permission.py:940 -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -#: ipaserver/plugins/permission.py:949 -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#: ipaserver/plugins/permission.py:961 ipaserver/plugins/permission.py:989 -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/permission.py:1014 -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:1046 -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#: ipaserver/plugins/permission.py:1057 -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/permission.py:1077 -msgid "cannot delete managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1083 -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#: ipaserver/plugins/permission.py:1092 -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/permission.py:1125 -msgid "cannot rename managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1132 ipaserver/plugins/permission.py:1136 -msgid "not modifiable on managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1143 -msgid "only available on managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1150 ipaserver/plugins/permission.py:1276 -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:1161 -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#: ipaserver/plugins/permission.py:1265 -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/serverroles.py:84 -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#: ipaserver/plugins/serverroles.py:178 -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -#: ipaserver/plugins/session.py:12 -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -#: ipaserver/plugins/internal.py:151 -msgid "Internationalization messages" -msgstr "" - -#: ipaserver/plugins/internal.py:157 -msgid "Your session has expired. Please log in again." -msgstr "" - -#: ipaserver/plugins/internal.py:161 ipaserver/plugins/internal.py:205 -msgid "Apply" -msgstr "" - -#: ipaserver/plugins/internal.py:162 -msgid "Rebuild auto membership" -msgstr "" - -#: ipaserver/plugins/internal.py:163 -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -#: ipaserver/plugins/internal.py:164 ipaserver/plugins/automember.py:799 -msgid "Automember rebuild membership task completed" -msgstr "" - -#: ipaserver/plugins/internal.py:165 -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#: ipaserver/plugins/internal.py:166 -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:167 -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:168 -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:169 -msgid "Actions" -msgstr "" - -#: ipaserver/plugins/internal.py:172 ipaserver/plugins/internal.py:200 -#: ipaserver/plugins/internal.py:262 -msgid "Add" -msgstr "" - -#: ipaserver/plugins/internal.py:173 -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -#: ipaserver/plugins/internal.py:174 -msgid "Direct Membership" -msgstr "" - -#: ipaserver/plugins/internal.py:175 -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:176 -msgid "Indirect Membership" -msgstr "" - -#: ipaserver/plugins/internal.py:177 -msgid "No entries." -msgstr "" - -#: ipaserver/plugins/internal.py:178 -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -#: ipaserver/plugins/internal.py:179 ipaserver/plugins/internal.py:277 -msgid "Remove" -msgstr "" - -#: ipaserver/plugins/internal.py:180 -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -#: ipaserver/plugins/internal.py:181 -msgid "Show Results" -msgstr "" - -#: ipaserver/plugins/internal.py:184 -msgid "Authentication indicators" -msgstr "" - -#: ipaserver/plugins/internal.py:185 -msgid "Authentication indicator" -msgstr "" - -#: ipaserver/plugins/internal.py:186 -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#: ipaserver/plugins/internal.py:187 -msgid "Add Custom Authentication Indicator" -msgstr "" - -#: ipaserver/plugins/internal.py:189 -msgid "Two factor authentication (password + OTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:191 -msgid "RADIUS" -msgstr "" - -#: ipaserver/plugins/internal.py:192 ipaserver/plugins/pkinit.py:41 -msgid "PKINIT" -msgstr "" - -#: ipaserver/plugins/internal.py:193 -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -#: ipaserver/plugins/internal.py:194 -msgid "Disable per-user override" -msgstr "" - -#: ipaserver/plugins/internal.py:195 -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#: ipaserver/plugins/internal.py:198 ipaserver/plugins/internal.py:272 -#: ipaserver/plugins/internal.py:1708 -msgid "About" -msgstr "" - -#: ipaserver/plugins/internal.py:199 -msgid "Activate" -msgstr "" - -#: ipaserver/plugins/internal.py:201 -msgid "Add and Add Another" -msgstr "" - -#: ipaserver/plugins/internal.py:202 -msgid "Add and Close" -msgstr "" - -#: ipaserver/plugins/internal.py:203 -msgid "Add and Edit" -msgstr "" - -#: ipaserver/plugins/internal.py:204 -msgid "Add Many" -msgstr "" - -#: ipaserver/plugins/internal.py:206 -msgid "Back" -msgstr "" - -#: ipaserver/plugins/internal.py:207 -msgid "Cancel" -msgstr "" - -#: ipaserver/plugins/internal.py:208 -msgid "Clear" -msgstr "" - -#: ipaserver/plugins/internal.py:209 -msgid "Clear all fields on the page." -msgstr "" - -#: ipaserver/plugins/internal.py:210 -msgid "Close" -msgstr "" - -#: ipaserver/plugins/internal.py:211 ipaserver/plugins/internal.py:1912 -msgid "Disable" -msgstr "" - -#: ipaserver/plugins/internal.py:212 ipaserver/plugins/internal.py:643 -msgid "Download" -msgstr "" - -#: ipaserver/plugins/internal.py:213 -msgid "Download certificate as PEM formatted file." -msgstr "" - -#: ipaserver/plugins/internal.py:214 -msgid "Edit" -msgstr "" - -#: ipaserver/plugins/internal.py:215 ipaserver/plugins/internal.py:1914 -msgid "Enable" -msgstr "" - -#: ipaserver/plugins/internal.py:217 -msgid "Find" -msgstr "" - -#: ipaserver/plugins/internal.py:218 -msgid "Get" -msgstr "" - -#: ipaserver/plugins/internal.py:219 -msgid "Hide" -msgstr "" - -#: ipaserver/plugins/internal.py:220 -msgid "Issue" -msgstr "" - -#: ipaserver/plugins/internal.py:221 -msgid "Match" -msgstr "" - -#: ipaserver/plugins/internal.py:222 -msgid "Match users according to certificate." -msgstr "" - -#: ipaserver/plugins/internal.py:223 -msgid "Migrate" -msgstr "" - -#: ipaserver/plugins/internal.py:224 -msgid "OK" -msgstr "" - -#: ipaserver/plugins/internal.py:225 -msgid "Refresh" -msgstr "" - -#: ipaserver/plugins/internal.py:226 -msgid "Reload current settings from the server." -msgstr "" - -#: ipaserver/plugins/internal.py:227 -msgid "Delete" -msgstr "" - -#: ipaserver/plugins/internal.py:228 ipaserver/plugins/internal.py:684 -msgid "Remove hold" -msgstr "" - -#: ipaserver/plugins/internal.py:229 -msgid "Reset" -msgstr "" - -#: ipaserver/plugins/internal.py:230 ipaserver/plugins/internal.py:1701 -msgid "Reset Password" -msgstr "" - -#: ipaserver/plugins/internal.py:231 -msgid "Reset Password and Log in" -msgstr "" - -#: ipaserver/plugins/internal.py:232 -msgid "Restore" -msgstr "" - -#: ipaserver/plugins/internal.py:233 -msgid "Retry" -msgstr "" - -#: ipaserver/plugins/internal.py:234 -msgid "Revert" -msgstr "" - -#: ipaserver/plugins/internal.py:236 -msgid "Revoke" -msgstr "" - -#: ipaserver/plugins/internal.py:237 -msgid "Save" -msgstr "" - -#: ipaserver/plugins/internal.py:238 -msgid "Set" -msgstr "" - -#: ipaserver/plugins/internal.py:239 -msgid "Show" -msgstr "" - -#: ipaserver/plugins/internal.py:240 -msgid "Stage" -msgstr "" - -#: ipaserver/plugins/internal.py:242 -msgid "Update" -msgstr "" - -#: ipaserver/plugins/internal.py:243 -msgid "View" -msgstr "" - -#: ipaserver/plugins/internal.py:246 ipaserver/plugins/internal.py:1709 -msgid "Customization" -msgstr "" - -#: ipaserver/plugins/internal.py:247 -msgid "Pagination Size" -msgstr "" - -#: ipaserver/plugins/internal.py:250 -msgid "Collapse All" -msgstr "" - -#: ipaserver/plugins/internal.py:251 -msgid "Expand All" -msgstr "" - -#: ipaserver/plugins/internal.py:252 -msgid "General" -msgstr "" - -#: ipaserver/plugins/internal.py:253 -msgid "Identity Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:254 -msgid "Record Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:255 -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:256 -msgid "Back to Top" -msgstr "" - -#: ipaserver/plugins/internal.py:257 -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#: ipaserver/plugins/internal.py:260 -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#: ipaserver/plugins/internal.py:261 -msgid "Add custom value" -msgstr "" - -#: ipaserver/plugins/internal.py:263 -msgid "Available" -msgstr "" - -#: ipaserver/plugins/internal.py:264 -msgid "Some operations failed." -msgstr "" - -#: ipaserver/plugins/internal.py:265 -msgid "Operations Error" -msgstr "" - -#: ipaserver/plugins/internal.py:266 -msgid "Confirmation" -msgstr "" - -#: ipaserver/plugins/internal.py:267 -msgid "Custom value" -msgstr "" - -#: ipaserver/plugins/internal.py:268 -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -#: ipaserver/plugins/internal.py:269 -msgid "Unsaved Changes" -msgstr "" - -#: ipaserver/plugins/internal.py:270 -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:271 -msgid "Hide details" -msgstr "" - -#: ipaserver/plugins/internal.py:273 -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -#: ipaserver/plugins/internal.py:274 -msgid "Prospective" -msgstr "" - -#: ipaserver/plugins/internal.py:275 -msgid "Redirection" -msgstr "" - -#: ipaserver/plugins/internal.py:276 -msgid "Select entries to be removed." -msgstr "" - -#: ipaserver/plugins/internal.py:278 -msgid "Result" -msgstr "" - -#: ipaserver/plugins/internal.py:279 -msgid "Show details" -msgstr "" - -#: ipaserver/plugins/internal.py:280 -msgid "Success" -msgstr "" - -#: ipaserver/plugins/internal.py:281 -msgid "Validation error" -msgstr "" - -#: ipaserver/plugins/internal.py:282 -msgid "Input form contains invalid or missing values." -msgstr "" - -#: ipaserver/plugins/internal.py:285 -msgid "Please try the following options:" -msgstr "" - -#: ipaserver/plugins/internal.py:286 -msgid "If the problem persists please contact the system administrator." -msgstr "" - -#: ipaserver/plugins/internal.py:287 -msgid "Refresh the page." -msgstr "" - -#: ipaserver/plugins/internal.py:288 -msgid "Reload the browser." -msgstr "" - -#: ipaserver/plugins/internal.py:289 -msgid "Return to the main page and retry the operation" -msgstr "" - -#: ipaserver/plugins/internal.py:290 -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#: ipaserver/plugins/internal.py:294 -msgid "HTTP Error" -msgstr "" - -#: ipaserver/plugins/internal.py:295 -msgid "Internal Error" -msgstr "" - -#: ipaserver/plugins/internal.py:296 -msgid "IPA Error" -msgstr "" - -#: ipaserver/plugins/internal.py:297 -msgid "No response" -msgstr "" - -#: ipaserver/plugins/internal.py:298 -msgid "Unknown Error" -msgstr "" - -#: ipaserver/plugins/internal.py:299 -msgid "URL" -msgstr "" - -#: ipaserver/plugins/internal.py:302 -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#: ipaserver/plugins/internal.py:303 -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#: ipaserver/plugins/internal.py:304 -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#: ipaserver/plugins/internal.py:305 -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -#: ipaserver/plugins/internal.py:308 -msgid "Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:309 ipaserver/plugins/internal.py:1722 -msgid "Search" -msgstr "" - -#: ipaserver/plugins/internal.py:311 -msgid "False" -msgstr "" - -#: ipaserver/plugins/internal.py:314 -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:317 -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:320 -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:323 -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:326 -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:329 -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:332 -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:335 -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:337 -msgid "Allowed to create keytab" -msgstr "" - -#: ipaserver/plugins/internal.py:338 -msgid "Allowed to retrieve keytab" -msgstr "" - -#: ipaserver/plugins/internal.py:340 -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:343 -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:346 -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:349 -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:352 -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:355 -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:358 -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:361 -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:365 -msgid "Add Kerberos Principal Alias" -msgstr "" - -#: ipaserver/plugins/internal.py:366 -msgid "New kerberos principal alias" -msgstr "" - -#: ipaserver/plugins/internal.py:367 -msgid "Remove Kerberos Alias" -msgstr "" - -#: ipaserver/plugins/internal.py:368 -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -#: ipaserver/plugins/internal.py:371 -msgid "Inherited from server configuration" -msgstr "" - -#: ipaserver/plugins/internal.py:372 -msgid "MS-PAC" -msgstr "" - -#: ipaserver/plugins/internal.py:373 -msgid "Override inherited settings" -msgstr "" - -#: ipaserver/plugins/internal.py:374 -msgid "PAD" -msgstr "" - -#: ipaserver/plugins/internal.py:377 -msgid "Authenticating" -msgstr "" - -#: ipaserver/plugins/internal.py:379 -msgid "Authentication with personal certificate failed" -msgstr "" - -#: ipaserver/plugins/internal.py:381 -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -#: ipaserver/plugins/internal.py:385 -msgid "Continue to next page" -msgstr "" - -#: ipaserver/plugins/internal.py:387 -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -#: ipaserver/plugins/internal.py:390 -msgid "Login failed due to an unknown reason" -msgstr "" - -#: ipaserver/plugins/internal.py:391 -msgid "Logged In As" -msgstr "" - -#: ipaserver/plugins/internal.py:392 -msgid "Authentication with Kerberos failed" -msgstr "" - -#: ipaserver/plugins/internal.py:394 -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -#: ipaserver/plugins/internal.py:399 -msgid "Loading" -msgstr "" - -#: ipaserver/plugins/internal.py:401 -msgid "Kerberos Principal you entered is expired" -msgstr "" - -#: ipaserver/plugins/internal.py:402 -msgid "Loading data" -msgstr "" - -#: ipaserver/plugins/internal.py:403 -msgid "Log in" -msgstr "" - -#: ipaserver/plugins/internal.py:404 -msgid "Log In Using Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:405 -msgid "Log in using personal certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:406 ipaserver/plugins/internal.py:1710 -msgid "Log out" -msgstr "" - -#: ipaserver/plugins/internal.py:407 -msgid "Log out error" -msgstr "" - -#: ipaserver/plugins/internal.py:409 ipaserver/plugins/internal.py:1695 -msgid "Password or Password+One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:410 -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -#: ipaserver/plugins/internal.py:411 -msgid "Sync OTP Token" -msgstr "" - -#: ipaserver/plugins/internal.py:412 -msgid "Synchronizing" -msgstr "" - -#: ipaserver/plugins/internal.py:414 -msgid "The user account you entered is locked" -msgstr "" - -#: ipaserver/plugins/internal.py:417 -msgid "number of passwords" -msgstr "" - -#: ipaserver/plugins/internal.py:418 -msgid "seconds" -msgstr "" - -#: ipaserver/plugins/internal.py:421 -msgid "Migrating" -msgstr "" - -#: ipaserver/plugins/internal.py:423 -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#: ipaserver/plugins/internal.py:426 -msgid "Password migration was not successful" -msgstr "" - -#: ipaserver/plugins/internal.py:428 -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#: ipaserver/plugins/internal.py:435 ipaserver/plugins/internal.py:1677 -msgid "The password or username you entered is incorrect" -msgstr "" - -#: ipaserver/plugins/internal.py:436 -msgid "Password migration was successful" -msgstr "" - -#: ipaserver/plugins/internal.py:440 ipaserver/plugins/internal.py:525 -#: ipaserver/plugins/internal.py:1213 -msgid "Attribute" -msgstr "" - -#: ipaserver/plugins/internal.py:443 -msgid "Add delegation" -msgstr "" - -#: ipaserver/plugins/internal.py:444 -msgid "Remove delegations" -msgstr "" - -#: ipaserver/plugins/internal.py:447 ipaserver/plugins/internal.py:779 -msgid "Add permission" -msgstr "" - -#: ipaserver/plugins/internal.py:449 -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:451 -msgid "Remove permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:453 -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:457 -msgid "Add privilege" -msgstr "" - -#: ipaserver/plugins/internal.py:459 -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:462 -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:464 -msgid "Remove privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:466 -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:469 -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:473 -msgid "Role Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:474 -msgid "Add role" -msgstr "" - -#: ipaserver/plugins/internal.py:476 -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:479 -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:482 -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:485 -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:488 -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:491 -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:493 -msgid "Remove roles" -msgstr "" - -#: ipaserver/plugins/internal.py:495 -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:498 -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:501 -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:504 -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:507 -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:510 -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:514 -msgid "Add self service permission" -msgstr "" - -#: ipaserver/plugins/internal.py:515 -msgid "Remove self service permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:518 -msgid "Add rule" -msgstr "" - -#: ipaserver/plugins/internal.py:520 -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:523 -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:527 -msgid "Are you sure you want to change default group?" -msgstr "" - -#: ipaserver/plugins/internal.py:529 -msgid "Default host group" -msgstr "" - -#: ipaserver/plugins/internal.py:530 -msgid "Default user group" -msgstr "" - -#: ipaserver/plugins/internal.py:531 -msgid "Exclusive" -msgstr "" - -#: ipaserver/plugins/internal.py:532 -msgid "Expression" -msgstr "" - -#: ipaserver/plugins/internal.py:533 -msgid "Host group rule" -msgstr "" - -#: ipaserver/plugins/internal.py:534 -msgid "Host group rules" -msgstr "" - -#: ipaserver/plugins/internal.py:535 -msgid "Inclusive" -msgstr "" - -#: ipaserver/plugins/internal.py:536 -msgid "Remove auto membership rules" -msgstr "" - -#: ipaserver/plugins/internal.py:538 -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:541 -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:543 -msgid "User group rule" -msgstr "" - -#: ipaserver/plugins/internal.py:544 -msgid "User group rules" -msgstr "" - -#: ipaserver/plugins/internal.py:547 -msgid "Add automount key" -msgstr "" - -#: ipaserver/plugins/internal.py:548 -msgid "Remove automount keys" -msgstr "" - -#: ipaserver/plugins/internal.py:551 -msgid "Add automount location" -msgstr "" - -#: ipaserver/plugins/internal.py:552 -msgid "Automount Location Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:553 -msgid "Remove automount locations" -msgstr "" - -#: ipaserver/plugins/internal.py:556 -msgid "Add automount map" -msgstr "" - -#: ipaserver/plugins/internal.py:557 -msgid "Map Type" -msgstr "" - -#: ipaserver/plugins/internal.py:558 -msgid "Direct" -msgstr "" - -#: ipaserver/plugins/internal.py:559 -msgid "Indirect" -msgstr "" - -#: ipaserver/plugins/internal.py:560 -msgid "Remove automount maps" -msgstr "" - -#: ipaserver/plugins/internal.py:563 -msgid "Add certificate authority" -msgstr "" - -#: ipaserver/plugins/internal.py:564 -msgid "Remove certificate authorities" -msgstr "" - -#: ipaserver/plugins/internal.py:567 -msgid "Add CA ACL" -msgstr "" - -#: ipaserver/plugins/internal.py:569 -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:573 -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:576 -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:579 -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:582 -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:585 -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:588 -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:590 -msgid "All" -msgstr "" - -#: ipaserver/plugins/internal.py:591 -msgid "Any CA" -msgstr "" - -#: ipaserver/plugins/internal.py:592 ipaserver/plugins/internal.py:901 -#: ipaserver/plugins/internal.py:1158 ipaserver/plugins/internal.py:1280 -#: ipaserver/plugins/internal.py:1435 -msgid "Any Host" -msgstr "" - -#: ipaserver/plugins/internal.py:593 ipaserver/plugins/internal.py:902 -msgid "Any Service" -msgstr "" - -#: ipaserver/plugins/internal.py:594 -msgid "Any Profile" -msgstr "" - -#: ipaserver/plugins/internal.py:595 ipaserver/plugins/internal.py:903 -#: ipaserver/plugins/internal.py:1159 ipaserver/plugins/internal.py:1281 -#: ipaserver/plugins/internal.py:1436 -msgid "Anyone" -msgstr "" - -#: ipaserver/plugins/internal.py:596 ipaserver/plugins/internal.py:905 -#: ipaserver/plugins/internal.py:1441 -msgid "Rule status" -msgstr "" - -#: ipaserver/plugins/internal.py:597 -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#: ipaserver/plugins/internal.py:599 -msgid "Remove CA ACLs" -msgstr "" - -#: ipaserver/plugins/internal.py:601 -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:605 -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:608 -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:611 -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:614 -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:617 -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:620 -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:622 -msgid "Specified CAs" -msgstr "" - -#: ipaserver/plugins/internal.py:623 ipaserver/plugins/internal.py:927 -#: ipaserver/plugins/internal.py:1185 ipaserver/plugins/internal.py:1296 -#: ipaserver/plugins/internal.py:1486 -msgid "Specified Hosts and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:624 -msgid "Specified Profiles" -msgstr "" - -#: ipaserver/plugins/internal.py:625 ipaserver/plugins/internal.py:928 -msgid "Specified Services and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:626 ipaserver/plugins/internal.py:929 -#: ipaserver/plugins/internal.py:1186 ipaserver/plugins/internal.py:1297 -#: ipaserver/plugins/internal.py:1487 -msgid "Specified Users and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:627 -msgid "Permitted to have certificates issued" -msgstr "" - -#: ipaserver/plugins/internal.py:630 -msgid "Remove certificate profiles" -msgstr "" - -#: ipaserver/plugins/internal.py:633 -msgid "AA Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:634 -msgid "Add principal" -msgstr "" - -#: ipaserver/plugins/internal.py:635 -msgid "Affiliation Changed" -msgstr "" - -#: ipaserver/plugins/internal.py:636 ipaserver/plugins/ca.py:341 -#: ipaserver/plugins/ca.py:350 ipaserver/plugins/ca.py:369 -#: ipaserver/plugins/ca.py:409 -msgid "CA" -msgstr "" - -#: ipaserver/plugins/internal.py:637 -msgid "CA Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:639 ipaserver/plugins/internal.py:1924 -msgid "Certificates" -msgstr "" - -#: ipaserver/plugins/internal.py:640 -msgid "Certificate Hold" -msgstr "" - -#: ipaserver/plugins/internal.py:641 -msgid "Cessation of Operation" -msgstr "" - -#: ipaserver/plugins/internal.py:642 -msgid "Common Name" -msgstr "" - -#: ipaserver/plugins/internal.py:644 -msgid "the certificate with serial number " -msgstr "" - -#: ipaserver/plugins/internal.py:645 -msgid "Expires On" -msgstr "" - -#: ipaserver/plugins/internal.py:646 -msgid "Issued on from" -msgstr "" - -#: ipaserver/plugins/internal.py:647 -msgid "Issued on to" -msgstr "" - -#: ipaserver/plugins/internal.py:648 -msgid "Maximum serial number" -msgstr "" - -#: ipaserver/plugins/internal.py:649 -msgid "Minimum serial number" -msgstr "" - -#: ipaserver/plugins/internal.py:651 -msgid "Revoked on from" -msgstr "" - -#: ipaserver/plugins/internal.py:652 -msgid "Revoked on to" -msgstr "" - -#: ipaserver/plugins/internal.py:654 -msgid "Valid not after from" -msgstr "" - -#: ipaserver/plugins/internal.py:655 -msgid "Valid not after to" -msgstr "" - -#: ipaserver/plugins/internal.py:656 -msgid "Valid not before from" -msgstr "" - -#: ipaserver/plugins/internal.py:657 -msgid "Valid not before to" -msgstr "" - -#: ipaserver/plugins/internal.py:658 -msgid "Fingerprints" -msgstr "" - -#: ipaserver/plugins/internal.py:659 -msgid "Get Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:660 -msgid "Certificate Hold Removed" -msgstr "" - -#: ipaserver/plugins/internal.py:662 -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:665 -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:668 -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:670 -msgid "Issue new certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:671 -msgid "Issued By" -msgstr "" - -#: ipaserver/plugins/internal.py:672 -msgid "Issued On" -msgstr "" - -#: ipaserver/plugins/internal.py:673 -msgid "Issued To" -msgstr "" - -#: ipaserver/plugins/internal.py:674 -msgid "Key Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:675 -msgid "No Valid Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:676 -msgid "New Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:677 -msgid "Certificate in base64 or PEM format" -msgstr "" - -#: ipaserver/plugins/internal.py:678 -msgid "Note" -msgstr "" - -#: ipaserver/plugins/internal.py:679 -msgid "Organization" -msgstr "" - -#: ipaserver/plugins/internal.py:680 -msgid "Organizational Unit" -msgstr "" - -#: ipaserver/plugins/internal.py:681 -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -#: ipaserver/plugins/internal.py:682 -msgid "Privilege Withdrawn" -msgstr "" - -#: ipaserver/plugins/internal.py:683 -msgid "Reason for Revocation" -msgstr "" - -#: ipaserver/plugins/internal.py:685 -msgid "Remove certificate hold" -msgstr "" - -#: ipaserver/plugins/internal.py:686 -msgid "Do you want to remove the certificate hold?" -msgstr "" - -#: ipaserver/plugins/internal.py:687 -msgid "Remove from CRL" -msgstr "" - -#: ipaserver/plugins/internal.py:688 -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#: ipaserver/plugins/internal.py:689 -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#: ipaserver/plugins/internal.py:690 -msgid "Certificate requested" -msgstr "" - -#: ipaserver/plugins/internal.py:692 -msgid "Revoke certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:693 -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#: ipaserver/plugins/internal.py:694 -msgid "Certificate Revoked" -msgstr "" - -#: ipaserver/plugins/internal.py:695 -msgid "REVOKED" -msgstr "" - -#: ipaserver/plugins/internal.py:698 -msgid "SHA1 Fingerprint" -msgstr "" - -#: ipaserver/plugins/internal.py:699 -msgid "SHA256 Fingerprint" -msgstr "" - -#: ipaserver/plugins/internal.py:701 -msgid "Superseded" -msgstr "" - -#: ipaserver/plugins/internal.py:702 -msgid "Unspecified" -msgstr "" - -#: ipaserver/plugins/internal.py:703 -msgid "Valid Certificate Present" -msgstr "" - -#: ipaserver/plugins/internal.py:704 -msgid "Valid from" -msgstr "" - -#: ipaserver/plugins/internal.py:705 -msgid "Valid to" -msgstr "" - -#: ipaserver/plugins/internal.py:706 -msgid "Validity" -msgstr "" - -#: ipaserver/plugins/internal.py:707 -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#: ipaserver/plugins/internal.py:708 -msgid "View Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:711 -msgid "Certificate Data" -msgstr "" - -#: ipaserver/plugins/internal.py:712 -msgid "Certificate For Match" -msgstr "" - -#: ipaserver/plugins/internal.py:713 -msgid "Certificate Mapping Match" -msgstr "" - -#: ipaserver/plugins/internal.py:715 -msgid "Matched Users" -msgstr "" - -#: ipaserver/plugins/internal.py:716 -msgid "User Login" -msgstr "" - -#: ipaserver/plugins/internal.py:719 -msgid "Add certificate identity mapping rule" -msgstr "" - -#: ipaserver/plugins/internal.py:720 -msgid "Add certificate mapping data" -msgstr "" - -#: ipaserver/plugins/internal.py:721 ipaserver/plugins/baseuser.py:404 -#: ipaserver/plugins/baseuser.py:405 -msgid "Certificate mapping data" -msgstr "" - -#: ipaserver/plugins/internal.py:723 -msgid "Configuration string" -msgstr "" - -#: ipaserver/plugins/internal.py:724 -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#: ipaserver/plugins/internal.py:725 -msgid "Remove certificate mapping data" -msgstr "" - -#: ipaserver/plugins/internal.py:727 -msgid "Issuer and subject" -msgstr "" - -#: ipaserver/plugins/internal.py:728 -msgid "Remove certificate identity mapping rules" -msgstr "" - -#: ipaserver/plugins/internal.py:733 -msgid "Group Options" -msgstr "" - -#: ipaserver/plugins/internal.py:734 -msgid "Search Options" -msgstr "" - -#: ipaserver/plugins/internal.py:735 -msgid "SELinux Options" -msgstr "" - -#: ipaserver/plugins/internal.py:736 -msgid "Server Options" -msgstr "" - -#: ipaserver/plugins/internal.py:737 -msgid "Service Options" -msgstr "" - -#: ipaserver/plugins/internal.py:738 -msgid "User Options" -msgstr "" - -#: ipaserver/plugins/internal.py:743 -msgid "Forward first" -msgstr "" - -#: ipaserver/plugins/internal.py:744 -msgid "Forwarding disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:745 -msgid "Forward only" -msgstr "" - -#: ipaserver/plugins/internal.py:746 ipaserver/plugins/internal.py:1444 -#: ipaserver/plugins/internal.py:1550 -msgid "Options" -msgstr "" - -#: ipaserver/plugins/internal.py:747 -msgid "Update System DNS Records" -msgstr "" - -#: ipaserver/plugins/internal.py:748 -msgid "Do you want to update system DNS records?" -msgstr "" - -#: ipaserver/plugins/internal.py:749 -msgid "System DNS records updated" -msgstr "" - -#: ipaserver/plugins/internal.py:752 -msgid "Add DNS forward zone" -msgstr "" - -#: ipaserver/plugins/internal.py:753 -msgid "Remove DNS forward zones" -msgstr "" - -#: ipaserver/plugins/internal.py:756 -msgid "Add DNS resource record" -msgstr "" - -#: ipaserver/plugins/internal.py:758 -msgid "DNS record was deleted because it contained no data." -msgstr "" - -#: ipaserver/plugins/internal.py:759 -msgid "Other Record Types" -msgstr "" - -#: ipaserver/plugins/internal.py:760 -msgid "Address not valid, can't redirect" -msgstr "" - -#: ipaserver/plugins/internal.py:761 -msgid "Create dns record" -msgstr "" - -#: ipaserver/plugins/internal.py:762 -msgid "Creating record." -msgstr "" - -#: ipaserver/plugins/internal.py:763 -msgid "Record creation failed." -msgstr "" - -#: ipaserver/plugins/internal.py:764 -msgid "Checking if record exists." -msgstr "" - -#: ipaserver/plugins/internal.py:765 -msgid "Record not found." -msgstr "" - -#: ipaserver/plugins/internal.py:766 -msgid "Redirection to PTR record" -msgstr "" - -#: ipaserver/plugins/internal.py:767 -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#: ipaserver/plugins/internal.py:768 -msgid "Target reverse zone not found." -msgstr "" - -#: ipaserver/plugins/internal.py:769 -msgid "Fetching DNS zones." -msgstr "" - -#: ipaserver/plugins/internal.py:770 -msgid "An error occurred while fetching dns zones." -msgstr "" - -#: ipaserver/plugins/internal.py:771 -msgid "You will be redirected to DNS Zone." -msgstr "" - -#: ipaserver/plugins/internal.py:772 -msgid "Remove DNS resource records" -msgstr "" - -#: ipaserver/plugins/internal.py:773 -msgid "Standard Record Types" -msgstr "" - -#: ipaserver/plugins/internal.py:774 -msgid "Records for DNS Zone" -msgstr "" - -#: ipaserver/plugins/internal.py:775 -msgid "Record Type" -msgstr "" - -#: ipaserver/plugins/internal.py:778 -msgid "Add DNS zone" -msgstr "" - -#: ipaserver/plugins/internal.py:780 -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:781 -msgid "DNS Zone Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:782 -msgid "Remove DNS zones" -msgstr "" - -#: ipaserver/plugins/internal.py:783 -msgid "Remove Permission" -msgstr "" - -#: ipaserver/plugins/internal.py:784 -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:785 -msgid "Skip DNS check" -msgstr "" - -#: ipaserver/plugins/internal.py:786 -msgid "Skip overlap check" -msgstr "" - -#: ipaserver/plugins/internal.py:787 -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:788 -msgid "Authoritative nameserver change" -msgstr "" - -#: ipaserver/plugins/internal.py:793 -msgid "Level" -msgstr "" - -#: ipaserver/plugins/internal.py:794 -msgid "Set Domain Level" -msgstr "" - -#: ipaserver/plugins/internal.py:797 -msgid "Add user group" -msgstr "" - -#: ipaserver/plugins/internal.py:799 -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:802 -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:805 -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:808 -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:811 -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:814 -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:817 -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:820 -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:823 -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:827 -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:831 -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:835 -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:839 -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:841 -msgid "Group Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:842 ipaserver/plugins/internal.py:1160 -#: ipaserver/plugins/internal.py:1439 -msgid "External" -msgstr "" - -#: ipaserver/plugins/internal.py:843 ipaserver/plugins/internal.py:1372 -msgid "Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:844 -msgid "Group categories" -msgstr "" - -#: ipaserver/plugins/internal.py:845 -msgid "Change to external group" -msgstr "" - -#: ipaserver/plugins/internal.py:846 -msgid "Change to POSIX group" -msgstr "" - -#: ipaserver/plugins/internal.py:847 -msgid "Non-POSIX" -msgstr "" - -#: ipaserver/plugins/internal.py:848 -msgid "POSIX" -msgstr "" - -#: ipaserver/plugins/internal.py:849 -msgid "Remove user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:851 -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:854 -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:857 -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:860 -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:863 -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:866 -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:869 -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:872 -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:875 -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:877 -msgid "Group Type" -msgstr "" - -#: ipaserver/plugins/internal.py:881 -msgid "Add HBAC rule" -msgstr "" - -#: ipaserver/plugins/internal.py:883 -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:886 -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:889 -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:892 -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:896 -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:899 -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:904 -msgid "Accessing" -msgstr "" - -#: ipaserver/plugins/internal.py:906 -msgid "Remove HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:908 -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:911 -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:914 -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:917 -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:921 -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:924 -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:926 -msgid "Via Service" -msgstr "" - -#: ipaserver/plugins/internal.py:930 ipaserver/plugins/internal.py:1488 -msgid "Who" -msgstr "" - -#: ipaserver/plugins/internal.py:933 -msgid "Add HBAC service" -msgstr "" - -#: ipaserver/plugins/internal.py:935 -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:938 -msgid "Remove HBAC services" -msgstr "" - -#: ipaserver/plugins/internal.py:940 -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:945 -msgid "Add HBAC service group" -msgstr "" - -#: ipaserver/plugins/internal.py:947 -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:950 -msgid "Remove HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:952 -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:958 -msgid "Access Denied" -msgstr "" - -#: ipaserver/plugins/internal.py:959 -msgid "Access Granted" -msgstr "" - -#: ipaserver/plugins/internal.py:960 -msgid "Include Disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:961 -msgid "Include Enabled" -msgstr "" - -#: ipaserver/plugins/internal.py:962 -msgid "HBAC Test" -msgstr "" - -#: ipaserver/plugins/internal.py:963 -msgid "Matched" -msgstr "" - -#: ipaserver/plugins/internal.py:964 -msgid "Missing values: " -msgstr "" - -#: ipaserver/plugins/internal.py:965 -msgid "New Test" -msgstr "" - -#: ipaserver/plugins/internal.py:966 -msgid "Rules" -msgstr "" - -#: ipaserver/plugins/internal.py:967 -msgid "Run Test" -msgstr "" - -#: ipaserver/plugins/internal.py:968 -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:969 -msgid "Unmatched" -msgstr "" - -#: ipaserver/plugins/internal.py:972 -msgid "Add host" -msgstr "" - -#: ipaserver/plugins/internal.py:974 -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:977 -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:980 -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:983 -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:986 -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:989 -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:991 -msgid "Host Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:992 ipaserver/plugins/internal.py:1321 -msgid "Host Name" -msgstr "" - -#: ipaserver/plugins/internal.py:993 ipaserver/plugins/internal.py:1319 -msgid "Delete Key, Unprovision" -msgstr "" - -#: ipaserver/plugins/internal.py:994 -msgid "Host Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:995 -msgid "Enrolled" -msgstr "" - -#: ipaserver/plugins/internal.py:996 -msgid "Enrollment" -msgstr "" - -#: ipaserver/plugins/internal.py:997 -msgid "Fully Qualified Host Name" -msgstr "" - -#: ipaserver/plugins/internal.py:998 -msgid "Generate OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:999 -msgid "Generated OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1000 -msgid "Kerberos Key" -msgstr "" - -#: ipaserver/plugins/internal.py:1001 ipaserver/plugins/internal.py:1322 -msgid "Kerberos Key Not Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1002 -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1003 ipaserver/plugins/internal.py:1690 -msgid "One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1004 -msgid "One-Time Password Not Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1005 -msgid "One-Time Password Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1006 -msgid "Reset OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1007 -msgid "Reset One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1008 -msgid "Set OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1009 -msgid "OTP set" -msgstr "" - -#: ipaserver/plugins/internal.py:1010 -msgid "Set One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1011 -msgid "Remove hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1013 -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1016 -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1019 -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1022 -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1025 -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1028 -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1031 ipaserver/plugins/internal.py:1333 -msgid "Unprovision" -msgstr "" - -#: ipaserver/plugins/internal.py:1032 -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -#: ipaserver/plugins/internal.py:1033 -msgid "Unprovisioning host" -msgstr "" - -#: ipaserver/plugins/internal.py:1034 -msgid "Host unprovisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1037 -msgid "Add host group" -msgstr "" - -#: ipaserver/plugins/internal.py:1039 -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1042 -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1045 -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1048 -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1051 -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1054 -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1057 -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1061 -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1065 -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1069 -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1073 -msgid "Host Group Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1074 -msgid "Remove host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1076 -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1079 -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1082 -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1085 -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1088 -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1091 -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1095 -msgid "User to override" -msgstr "" - -#: ipaserver/plugins/internal.py:1096 -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -#: ipaserver/plugins/internal.py:1097 -msgid "Enter trusted user login." -msgstr "" - -#: ipaserver/plugins/internal.py:1098 ipaserver/plugins/internal.py:1712 -msgid "Profile" -msgstr "" - -#: ipaserver/plugins/internal.py:1101 -msgid "Group to override" -msgstr "" - -#: ipaserver/plugins/internal.py:1102 -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#: ipaserver/plugins/internal.py:1103 -msgid "Enter trusted group name." -msgstr "" - -#: ipaserver/plugins/internal.py:1106 -msgid "Add ID view" -msgstr "" - -#: ipaserver/plugins/internal.py:1107 -msgid "Add group ID override" -msgstr "" - -#: ipaserver/plugins/internal.py:1108 -msgid "Add user ID override" -msgstr "" - -#: ipaserver/plugins/internal.py:1109 -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -#: ipaserver/plugins/internal.py:1110 ipaserver/plugins/internal.py:1111 -msgid "Applied to hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1112 -msgid "Apply to host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1114 -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1116 -msgid "Apply to hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1118 -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1121 -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -#: ipaserver/plugins/internal.py:1122 -msgid "Remove ID views" -msgstr "" - -#: ipaserver/plugins/internal.py:1123 -msgid "Remove user ID overrides" -msgstr "" - -#: ipaserver/plugins/internal.py:1124 -msgid "Remove group ID overrides" -msgstr "" - -#: ipaserver/plugins/internal.py:1125 -msgid "Un-apply from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1126 -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1127 -msgid "Un-apply" -msgstr "" - -#: ipaserver/plugins/internal.py:1128 -msgid "Un-apply from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1129 -msgid "Un-apply ID Views from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1130 -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1132 -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1136 ipaserver/plugins/krbtpolicy.py:128 -#: ipaserver/plugins/krbtpolicy.py:129 -msgid "Kerberos Ticket Policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1139 -msgid "Add netgroup" -msgstr "" - -#: ipaserver/plugins/internal.py:1141 -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1144 -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1147 -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1150 -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1153 -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1156 -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1161 ipaserver/plugins/internal.py:1282 -#: ipaserver/plugins/host.py:457 -msgid "Host" -msgstr "" - -#: ipaserver/plugins/internal.py:1164 -msgid "Netgroup Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1165 ipaserver/plugins/netgroup.py:196 -msgid "Netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1166 -msgid "Remove netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1168 -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1171 -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1174 -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1177 -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1180 -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1183 -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1192 -msgid "Add OTP token" -msgstr "" - -#: ipaserver/plugins/internal.py:1194 -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1196 -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#: ipaserver/plugins/internal.py:1197 -msgid "Configure your token" -msgstr "" - -#: ipaserver/plugins/internal.py:1198 -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#: ipaserver/plugins/internal.py:1199 -msgid "OTP Token Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1200 -msgid "Disable token" -msgstr "" - -#: ipaserver/plugins/internal.py:1201 -msgid "Enable token" -msgstr "" - -#: ipaserver/plugins/internal.py:1202 -msgid "Remove OTP tokens" -msgstr "" - -#: ipaserver/plugins/internal.py:1204 -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1206 -msgid "Show QR code" -msgstr "" - -#: ipaserver/plugins/internal.py:1207 -msgid "Show configuration uri" -msgstr "" - -#: ipaserver/plugins/internal.py:1208 -msgid "Counter-based (HOTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:1209 -msgid "Time-based (TOTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:1212 -msgid "Add Custom Attribute" -msgstr "" - -#: ipaserver/plugins/internal.py:1215 -msgid "Permission settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1216 -msgid "Attribute breakdown" -msgstr "" - -#: ipaserver/plugins/internal.py:1220 -msgid "Privilege Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1223 -msgid "Public key:" -msgstr "" - -#: ipaserver/plugins/internal.py:1224 -msgid "Set public key" -msgstr "" - -#: ipaserver/plugins/internal.py:1225 ipaserver/plugins/internal.py:1343 -msgid "Show/Set key" -msgstr "" - -#: ipaserver/plugins/internal.py:1226 ipaserver/plugins/internal.py:1344 -msgid "Modified: key not set" -msgstr "" - -#: ipaserver/plugins/internal.py:1227 ipaserver/plugins/internal.py:1345 -msgid "Modified" -msgstr "" - -#: ipaserver/plugins/internal.py:1228 ipaserver/plugins/internal.py:1346 -msgid "New: key not set" -msgstr "" - -#: ipaserver/plugins/internal.py:1229 ipaserver/plugins/internal.py:1347 -msgid "New: key set" -msgstr "" - -#: ipaserver/plugins/internal.py:1232 -msgid "Add password policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1234 -msgid "Remove password policies" -msgstr "" - -#: ipaserver/plugins/internal.py:1237 -msgid "Add ID range" -msgstr "" - -#: ipaserver/plugins/internal.py:1238 -msgid "Range Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1239 -msgid "Base ID" -msgstr "" - -#: ipaserver/plugins/internal.py:1240 -msgid "Primary RID base" -msgstr "" - -#: ipaserver/plugins/internal.py:1241 -msgid "Range size" -msgstr "" - -#: ipaserver/plugins/internal.py:1242 -msgid "Domain SID" -msgstr "" - -#: ipaserver/plugins/internal.py:1243 -msgid "Secondary RID base" -msgstr "" - -#: ipaserver/plugins/internal.py:1244 -msgid "Remove ID ranges" -msgstr "" - -#: ipaserver/plugins/internal.py:1246 ipaserver/dcerpc_common.py:37 -msgid "Active Directory domain" -msgstr "" - -#: ipaserver/plugins/internal.py:1247 -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -#: ipaserver/plugins/internal.py:1248 -msgid "Detect" -msgstr "" - -#: ipaserver/plugins/internal.py:1249 -msgid "Local domain" -msgstr "" - -#: ipaserver/plugins/internal.py:1250 -msgid "IPA trust" -msgstr "" - -#: ipaserver/plugins/internal.py:1251 -msgid "Active Directory winsync" -msgstr "" - -#: ipaserver/plugins/internal.py:1254 -msgid "Add RADIUS server" -msgstr "" - -#: ipaserver/plugins/internal.py:1255 -msgid "RADIUS Proxy Server Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1256 -msgid "Remove RADIUS servers" -msgstr "" - -#: ipaserver/plugins/internal.py:1260 -msgid "Check DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:1261 -msgid "Do you also want to perform DNS check?" -msgstr "" - -#: ipaserver/plugins/internal.py:1262 -msgid "Force Update" -msgstr "" - -#: ipaserver/plugins/internal.py:1267 -msgid "Add SELinux user map" -msgstr "" - -#: ipaserver/plugins/internal.py:1269 -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1272 -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1275 -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1278 -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1283 -msgid "Remove selinux user maps" -msgstr "" - -#: ipaserver/plugins/internal.py:1285 -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1288 -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1291 -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1294 -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1301 -msgid "Server Roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1302 -msgid "Server Role" -msgstr "" - -#: ipaserver/plugins/internal.py:1305 -msgid "Warning: Consider service replication" -msgstr "" - -#: ipaserver/plugins/internal.py:1306 -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#: ipaserver/plugins/internal.py:1307 -msgid "Delete Server" -msgstr "" - -#: ipaserver/plugins/internal.py:1308 -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#: ipaserver/plugins/internal.py:1311 -msgid "Add service" -msgstr "" - -#: ipaserver/plugins/internal.py:1313 -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1316 -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1318 -msgid "Service Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:1320 -msgid "Service Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1323 -msgid "Provisioning" -msgstr "" - -#: ipaserver/plugins/internal.py:1324 -msgid "Remove services" -msgstr "" - -#: ipaserver/plugins/internal.py:1326 -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1329 -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1334 -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -#: ipaserver/plugins/internal.py:1335 -msgid "Unprovisioning service" -msgstr "" - -#: ipaserver/plugins/internal.py:1336 -msgid "Service unprovisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1337 -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1340 -msgid "SSH public keys" -msgstr "" - -#: ipaserver/plugins/internal.py:1341 -msgid "SSH public key:" -msgstr "" - -#: ipaserver/plugins/internal.py:1342 -msgid "Set SSH key" -msgstr "" - -#: ipaserver/plugins/internal.py:1350 -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1351 -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1352 -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -#: ipaserver/plugins/internal.py:1353 -msgid "Add stage user" -msgstr "" - -#: ipaserver/plugins/internal.py:1354 -msgid "Stage users" -msgstr "" - -#: ipaserver/plugins/internal.py:1355 -msgid "Preserved users" -msgstr "" - -#: ipaserver/plugins/internal.py:1356 -msgid "Remove preserved users" -msgstr "" - -#: ipaserver/plugins/internal.py:1357 -msgid "Remove stage users" -msgstr "" - -#: ipaserver/plugins/internal.py:1358 -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1359 -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#: ipaserver/plugins/internal.py:1360 -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1361 -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1362 -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1363 -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -#: ipaserver/plugins/internal.py:1364 -msgid "User categories" -msgstr "" - -#: ipaserver/plugins/internal.py:1367 -msgid "Add sudo command" -msgstr "" - -#: ipaserver/plugins/internal.py:1369 -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1373 -msgid "Remove sudo commands" -msgstr "" - -#: ipaserver/plugins/internal.py:1375 -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1380 -msgid "Add sudo command group" -msgstr "" - -#: ipaserver/plugins/internal.py:1382 -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1386 -msgid "Remove sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1388 -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1393 -msgid "Add sudo rule" -msgstr "" - -#: ipaserver/plugins/internal.py:1394 -msgid "Add sudo option" -msgstr "" - -#: ipaserver/plugins/internal.py:1396 -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1400 -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1404 -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1408 -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1412 -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1415 -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1418 -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1421 -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1424 -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1427 -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1430 -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1432 -msgid "Allow" -msgstr "" - -#: ipaserver/plugins/internal.py:1433 -msgid "Any Command" -msgstr "" - -#: ipaserver/plugins/internal.py:1434 -msgid "Any Group" -msgstr "" - -#: ipaserver/plugins/internal.py:1437 -msgid "Run Commands" -msgstr "" - -#: ipaserver/plugins/internal.py:1438 -msgid "Deny" -msgstr "" - -#: ipaserver/plugins/internal.py:1440 -msgid "Access this host" -msgstr "" - -#: ipaserver/plugins/internal.py:1442 -msgid "Option added" -msgstr "" - -#: ipaserver/plugins/internal.py:1443 -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -#: ipaserver/plugins/internal.py:1445 -msgid "Remove sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1447 -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1451 -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1455 -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1459 -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1463 -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1466 -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1469 -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1472 -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1475 -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1478 -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1481 -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1483 -msgid "As Whom" -msgstr "" - -#: ipaserver/plugins/internal.py:1484 -msgid "Specified Commands and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1485 -msgid "Specified Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1491 -msgid "Remove sudo options" -msgstr "" - -#: ipaserver/plugins/internal.py:1494 -msgid "Autogenerated" -msgstr "" - -#: ipaserver/plugins/internal.py:1495 -msgid "Segment details" -msgstr "" - -#: ipaserver/plugins/internal.py:1496 -msgid "Replication configuration" -msgstr "" - -#: ipaserver/plugins/internal.py:1497 -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#: ipaserver/plugins/internal.py:1500 -msgid "Add IPA location" -msgstr "" - -#: ipaserver/plugins/internal.py:1502 -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1504 -msgid "Remove IPA locations" -msgstr "" - -#: ipaserver/plugins/internal.py:1506 -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1510 -msgid "Add topology segment" -msgstr "" - -#: ipaserver/plugins/internal.py:1511 -msgid "Remove topology segments" -msgstr "" - -#: ipaserver/plugins/internal.py:1514 -msgid "Account" -msgstr "" - -#: ipaserver/plugins/internal.py:1515 -msgid "Add trust" -msgstr "" - -#: ipaserver/plugins/internal.py:1516 -msgid "Administrative account" -msgstr "" - -#: ipaserver/plugins/internal.py:1517 -msgid "SID blocklists" -msgstr "" - -#: ipaserver/plugins/internal.py:1518 -msgid "Trust Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1520 -msgid "Establish using" -msgstr "" - -#: ipaserver/plugins/internal.py:1521 -msgid "Fetch domains" -msgstr "" - -#: ipaserver/plugins/internal.py:1524 -msgid "Pre-shared password" -msgstr "" - -#: ipaserver/plugins/internal.py:1525 -msgid "Remove trusts" -msgstr "" - -#: ipaserver/plugins/internal.py:1526 -msgid "Remove domains" -msgstr "" - -#: ipaserver/plugins/internal.py:1527 ipaserver/plugins/trust.py:556 -msgid "Trust direction" -msgstr "" - -#: ipaserver/plugins/internal.py:1528 ipaserver/plugins/trust.py:564 -msgid "Trust status" -msgstr "" - -#: ipaserver/plugins/internal.py:1529 ipaserver/plugins/trust.py:560 -msgid "Trust type" -msgstr "" - -#: ipaserver/plugins/internal.py:1530 -msgid "Alternative UPN suffixes" -msgstr "" - -#: ipaserver/plugins/internal.py:1534 -msgid "User attributes for SMB services" -msgstr "" - -#: ipaserver/plugins/internal.py:1537 -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -#: ipaserver/plugins/internal.py:1540 -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -#: ipaserver/plugins/internal.py:1543 -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#: ipaserver/plugins/internal.py:1546 -msgid "Drive to mount a home directory" -msgstr "" - -#: ipaserver/plugins/internal.py:1553 -msgid "Account Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1554 -msgid "Account Status" -msgstr "" - -#: ipaserver/plugins/internal.py:1555 -msgid "Active users" -msgstr "" - -#: ipaserver/plugins/internal.py:1556 -msgid "Add user" -msgstr "" - -#: ipaserver/plugins/internal.py:1558 -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1561 -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1564 -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1567 -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1570 -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1572 -msgid "Contact Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1573 -msgid "Delete mode" -msgstr "" - -#: ipaserver/plugins/internal.py:1574 -msgid "Employee Information" -msgstr "" - -#: ipaserver/plugins/internal.py:1575 -msgid "Error changing account status" -msgstr "" - -#: ipaserver/plugins/internal.py:1576 -msgid "Password expiration" -msgstr "" - -#: ipaserver/plugins/internal.py:1577 -msgid "Mailing Address" -msgstr "" - -#: ipaserver/plugins/internal.py:1578 -msgid "Misc. Information" -msgstr "" - -#: ipaserver/plugins/internal.py:1579 -msgid "delete" -msgstr "" - -#: ipaserver/plugins/internal.py:1580 -msgid "preserve" -msgstr "" - -#: ipaserver/plugins/internal.py:1581 -msgid "No private group" -msgstr "" - -#: ipaserver/plugins/internal.py:1582 -msgid "Remove users" -msgstr "" - -#: ipaserver/plugins/internal.py:1584 -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1587 -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1590 -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1593 -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1596 -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1598 -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#: ipaserver/plugins/internal.py:1599 -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -#: ipaserver/plugins/internal.py:1600 -msgid "Unlock" -msgstr "" - -#: ipaserver/plugins/internal.py:1601 -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1604 -msgid "Add vault" -msgstr "" - -#: ipaserver/plugins/internal.py:1606 -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1609 -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1612 -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1615 -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1618 -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1621 -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1624 -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -#: ipaserver/plugins/internal.py:1628 -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -#: ipaserver/plugins/internal.py:1631 -msgid "Asymmetric" -msgstr "" - -#: ipaserver/plugins/internal.py:1632 -msgid "Vaults Config" -msgstr "" - -#: ipaserver/plugins/internal.py:1634 -msgid "Members" -msgstr "" - -#: ipaserver/plugins/internal.py:1635 -msgid "My User Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1636 -msgid "Owners" -msgstr "" - -#: ipaserver/plugins/internal.py:1637 -msgid "Remove vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1639 -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1642 -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1645 -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1648 -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1651 -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1654 -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1657 -msgid "Service Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1658 -msgid "Shared" -msgstr "" - -#: ipaserver/plugins/internal.py:1659 -msgid "Shared Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1660 -msgid "Standard" -msgstr "" - -#: ipaserver/plugins/internal.py:1661 -msgid "Symmetric" -msgstr "" - -#: ipaserver/plugins/internal.py:1662 -msgid "Vault Type" -msgstr "" - -#: ipaserver/plugins/internal.py:1664 -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#: ipaserver/plugins/internal.py:1668 -msgid "User Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1673 -msgid "Current password is required" -msgstr "" - -#: ipaserver/plugins/internal.py:1674 -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#: ipaserver/plugins/internal.py:1675 -msgid "First OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1679 -msgid "New password is required" -msgstr "" - -#: ipaserver/plugins/internal.py:1682 -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -#: ipaserver/plugins/internal.py:1686 -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -#: ipaserver/plugins/internal.py:1691 -msgid "Token synchronization failed" -msgstr "" - -#: ipaserver/plugins/internal.py:1692 -msgid "The username, password or token codes are not correct" -msgstr "" - -#: ipaserver/plugins/internal.py:1693 -msgid "Token was synchronized" -msgstr "" - -#: ipaserver/plugins/internal.py:1696 -msgid "Password change complete" -msgstr "" - -#: ipaserver/plugins/internal.py:1698 -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#: ipaserver/plugins/internal.py:1699 -msgid "Passwords must match" -msgstr "" - -#: ipaserver/plugins/internal.py:1700 -msgid "Password reset was not successful." -msgstr "" - -#: ipaserver/plugins/internal.py:1702 -msgid "Reset your password." -msgstr "" - -#: ipaserver/plugins/internal.py:1703 -msgid "Second OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1705 -msgid "Verify Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1715 -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1716 -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -#: ipaserver/plugins/internal.py:1717 -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1718 -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:1719 -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1720 -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -#: ipaserver/plugins/internal.py:1721 -msgid "Some entries were not deleted" -msgstr "" - -#: ipaserver/plugins/internal.py:1724 -msgid "Quick Links" -msgstr "" - -#: ipaserver/plugins/internal.py:1725 -msgid "Select All" -msgstr "" - -#: ipaserver/plugins/internal.py:1726 -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -#: ipaserver/plugins/internal.py:1727 -msgid "Unselect All" -msgstr "" - -#: ipaserver/plugins/internal.py:1731 -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1735 -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1747 -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1783 -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1795 -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1824 -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1869 -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1880 -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1917 -msgid "Working" -msgstr "" - -#: ipaserver/plugins/internal.py:1920 -msgid "Audit" -msgstr "" - -#: ipaserver/plugins/internal.py:1921 -msgid "Authentication" -msgstr "" - -#: ipaserver/plugins/internal.py:1922 ipaserver/plugins/automember.py:818 -msgid "Automember" -msgstr "" - -#: ipaserver/plugins/internal.py:1923 -msgid "Automount" -msgstr "" - -#: ipaserver/plugins/internal.py:1925 -msgid "DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:1926 -msgid "Host-Based Access Control" -msgstr "" - -#: ipaserver/plugins/internal.py:1927 -msgid "Identity" -msgstr "" - -#: ipaserver/plugins/internal.py:1928 ipaserver/plugins/location.py:157 -#: ipaserver/plugins/server.py:71 -msgid "IPA Server" -msgstr "" - -#: ipaserver/plugins/internal.py:1929 -msgid "Network Services" -msgstr "" - -#: ipaserver/plugins/internal.py:1930 -msgid "Policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1931 -msgid "Role-Based Access Control" -msgstr "" - -#: ipaserver/plugins/internal.py:1932 -msgid "Sudo" -msgstr "" - -#: ipaserver/plugins/internal.py:1933 -msgid "Topology" -msgstr "" - -#: ipaserver/plugins/internal.py:1934 ipaserver/plugins/trust.py:530 -msgid "Trusts" -msgstr "" - -#: ipaserver/plugins/internal.py:1936 -msgid "True" -msgstr "" - -#: ipaserver/plugins/internal.py:1938 -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1955 -msgid "API Browser" -msgstr "" - -#: ipaserver/plugins/internal.py:1956 -msgid "First" -msgstr "" - -#: ipaserver/plugins/internal.py:1957 -msgid "Last" -msgstr "" - -#: ipaserver/plugins/internal.py:1958 -msgid "Next" -msgstr "" - -#: ipaserver/plugins/internal.py:1959 -msgid "Page" -msgstr "" - -#: ipaserver/plugins/internal.py:1960 -msgid "Prev" -msgstr "" - -#: ipaserver/plugins/internal.py:1961 -msgid "Undo" -msgstr "" - -#: ipaserver/plugins/internal.py:1962 -msgid "Undo this change." -msgstr "" - -#: ipaserver/plugins/internal.py:1963 -msgid "Undo All" -msgstr "" - -#: ipaserver/plugins/internal.py:1964 -msgid "Undo all changes in this field." -msgstr "" - -#: ipaserver/plugins/internal.py:1966 -msgid "Text does not match field pattern" -msgstr "" - -#: ipaserver/plugins/internal.py:1967 -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#: ipaserver/plugins/internal.py:1968 -msgid "Must be a decimal number" -msgstr "" - -#: ipaserver/plugins/internal.py:1969 -msgid "Format error" -msgstr "" - -#: ipaserver/plugins/internal.py:1970 -msgid "Must be an integer" -msgstr "" - -#: ipaserver/plugins/internal.py:1971 -msgid "Not a valid IP address" -msgstr "" - -#: ipaserver/plugins/internal.py:1972 -msgid "Not a valid IPv4 address" -msgstr "" - -#: ipaserver/plugins/internal.py:1973 -msgid "Not a valid IPv6 address" -msgstr "" - -#: ipaserver/plugins/internal.py:1974 -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#: ipaserver/plugins/internal.py:1975 -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -#: ipaserver/plugins/internal.py:1976 -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#: ipaserver/plugins/internal.py:1977 -msgid "Parse error" -msgstr "" - -#: ipaserver/plugins/internal.py:1978 -msgid "Must be a positive number" -msgstr "" - -#: ipaserver/plugins/internal.py:1979 -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#: ipaserver/plugins/internal.py:1980 -msgid "Required field" -msgstr "" - -#: ipaserver/plugins/internal.py:1981 -msgid "Unsupported value" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:35 -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:37 -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:39 -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:45 -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:48 -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:51 -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:54 -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:57 -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:68 -msgid "invalid attribute name" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:80 -msgid "invalid port number" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:98 -msgid "RADIUS proxy server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:99 -msgid "RADIUS proxy servers" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:106 -msgid "RADIUS Servers" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:107 -msgid "RADIUS Server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:172 -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:177 -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:182 -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:188 -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/domainlevel.py:69 -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:112 -msgid "Server does not support domain level functionality" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:147 -msgid "Domain Level cannot be lowered." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:155 -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -#: ipaserver/plugins/hbactest.py:45 -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -#: ipaserver/plugins/hbactest.py:384 -msgid "Unresolved rules in --rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:402 ipaserver/plugins/group.py:629 -#: ipaserver/plugins/group.py:686 -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -#: ipaserver/plugins/hbactest.py:408 ipaserver/plugins/trust.py:345 -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/hbactest.py:497 -#, python-format -msgid "Access granted: %s" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:86 -msgid "kerberos ticket policy settings" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:152 -msgid "OTP max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:153 -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:157 -msgid "OTP max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:158 -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:162 -msgid "RADIUS max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:163 -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:167 -msgid "RADIUS max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:168 -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:172 -msgid "PKINIT max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:173 -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:177 -msgid "PKINIT max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:178 -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:182 -msgid "Hardened max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:183 -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:187 -msgid "Hardened max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:188 -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:272 -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:292 -msgid "Default ticket policy could not be read" -msgstr "" - -#: ipaserver/plugins/ldap2.py:270 -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#: ipaserver/plugins/location.py:33 -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -#: ipaserver/plugins/location.py:35 -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -#: ipaserver/plugins/location.py:39 -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -#: ipaserver/plugins/location.py:42 -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -#: ipaserver/plugins/location.py:45 -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -#: ipaserver/plugins/location.py:48 -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#: ipaserver/plugins/location.py:62 -msgid "location" -msgstr "" - -#: ipaserver/plugins/location.py:63 -msgid "locations" -msgstr "" - -#: ipaserver/plugins/location.py:69 -msgid "IPA Locations" -msgstr "" - -#: ipaserver/plugins/location.py:70 -msgid "IPA Location" -msgstr "" - -#: ipaserver/plugins/location.py:103 -msgid "Location name" -msgstr "" - -#: ipaserver/plugins/location.py:104 -msgid "IPA location name" -msgstr "" - -#: ipaserver/plugins/location.py:112 -msgid "IPA Location description" -msgstr "" - -#: ipaserver/plugins/location.py:116 -msgid "Servers" -msgstr "" - -#: ipaserver/plugins/location.py:117 -msgid "Servers that belongs to the IPA location" -msgstr "" - -#: ipaserver/plugins/location.py:122 -msgid "Advertised by servers" -msgstr "" - -#: ipaserver/plugins/location.py:123 -msgid "List of servers which advertise the given location" -msgstr "" - -#: ipaserver/plugins/location.py:138 -msgid "Add a new IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:140 -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:145 -msgid "Delete an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:147 -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:170 -msgid "Modify information about an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:172 -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:177 -msgid "Search for IPA locations." -msgstr "" - -#: ipaserver/plugins/location.py:180 -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/location.py:187 -msgid "Display information about an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:193 -msgid "Servers in location" -msgstr "" - -#: ipaserver/plugins/topology.py:24 -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:28 -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -#: ipaserver/plugins/topology.py:33 -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:39 -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:43 -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -#: ipaserver/plugins/topology.py:47 -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:52 -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:55 -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:58 -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:61 -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:64 -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:67 -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:70 -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:73 -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:76 -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:92 -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -#: ipaserver/plugins/topology.py:104 -msgid "segment" -msgstr "" - -#: ipaserver/plugins/topology.py:105 -msgid "segments" -msgstr "" - -#: ipaserver/plugins/topology.py:119 -msgid "Topology Segments" -msgstr "" - -#: ipaserver/plugins/topology.py:120 -msgid "Topology Segment" -msgstr "" - -#: ipaserver/plugins/topology.py:226 -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:233 -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:250 -msgid "left node and right node must not be the same" -msgstr "" - -#: ipaserver/plugins/topology.py:261 -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:269 -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:280 -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:289 -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:302 -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:314 -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:329 -#, python-format -msgid "%(value)s" -msgstr "" - -#: ipaserver/plugins/topology.py:365 -msgid "left or right node has to be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:370 -msgid "only one node can be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:374 -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:377 -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:408 -msgid "suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:412 -msgid "Topology suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:413 -msgid "Topology suffix" -msgstr "" - -#: ipaserver/plugins/topology.py:435 -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:446 -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:460 -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:474 -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:489 -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:33 -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:55 -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:64 -msgid "sudo command" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:65 -msgid "sudo commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:117 -msgid "Sudo Commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:154 -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:160 -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:193 -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:201 -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/selfservice.py:68 -msgid "self service permission" -msgstr "" - -#: ipaserver/plugins/selfservice.py:69 -msgid "self service permissions" -msgstr "" - -#: ipaserver/plugins/selfservice.py:70 -msgid "Self Service Permissions" -msgstr "" - -#: ipaserver/plugins/selfservice.py:71 -msgid "Self Service Permission" -msgstr "" - -#: ipaserver/plugins/selfservice.py:124 -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:146 -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:163 -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:185 -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/aci.py:165 -msgid "A list of ACI values" -msgstr "" - -#: ipaserver/plugins/aci.py:229 -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:232 -msgid "ACI prefix is required" -msgstr "" - -#: ipaserver/plugins/aci.py:235 -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -#: ipaserver/plugins/aci.py:238 -msgid "filter and memberof are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:244 -msgid "group, permission and self are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:246 -msgid "One of group, permission or self is required" -msgstr "" - -#: ipaserver/plugins/aci.py:269 -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -#: ipaserver/plugins/aci.py:295 -msgid "empty filter" -msgstr "" - -#: ipaserver/plugins/aci.py:316 -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#: ipaserver/plugins/aci.py:361 -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#: ipaserver/plugins/aci.py:408 -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -#: ipaserver/plugins/aci.py:437 -msgid "ACI object." -msgstr "" - -#: ipaserver/plugins/aci.py:440 -msgid "ACIs" -msgstr "" - -#: ipaserver/plugins/aci.py:524 -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/aci.py:577 -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/aci.py:620 -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/aci.py:694 -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/aci.py:929 -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - #: ipaserver/plugins/group.py:62 msgid "" "\n" @@ -21419,151 +22196,1347 @@ msgstr "" msgid "Remove users that can manage members of this group." msgstr "" -#: ipaserver/plugins/automount.py:218 -msgid "automount location" +#: ipaserver/plugins/user.py:163 ipaserver/plugins/sudorule.py:433 +msgid "users" msgstr "" -#: ipaserver/plugins/automount.py:219 -msgid "automount locations" -msgstr "" - -#: ipaserver/plugins/automount.py:222 -msgid "Automount Locations" -msgstr "" - -#: ipaserver/plugins/automount.py:223 -msgid "Automount Location" -msgstr "" - -#: ipaserver/plugins/automount.py:263 +#: ipaserver/plugins/user.py:495 #, python-format -msgid "Added automount location \"%(value)s\"" +msgid "Added user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:283 -#, python-format -msgid "Deleted automount location \"%(value)s\"" +#: ipaserver/plugins/user.py:594 +msgid "Default group for new users is not POSIX" msgstr "" -#: ipaserver/plugins/automount.py:296 +#: ipaserver/plugins/user.py:683 #, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:701 +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#: ipaserver/plugins/user.py:812 +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:847 ipaserver/plugins/stageuser.py:471 +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/automount.py:349 -msgid "automount map" -msgstr "" - -#: ipaserver/plugins/automount.py:350 -msgid "automount maps" -msgstr "" - -#: ipaserver/plugins/automount.py:393 -msgid "Automount Maps" -msgstr "" - -#: ipaserver/plugins/automount.py:394 -msgid "Automount Map" -msgstr "" - -#: ipaserver/plugins/automount.py:401 +#: ipaserver/plugins/user.py:925 #, python-format -msgid "Added automount map \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:408 +#: ipaserver/plugins/user.py:939 #, python-format -msgid "Deleted automount map \"%(value)s\"" +msgid "user \"%s\" is already active" msgstr "" -#: ipaserver/plugins/automount.py:428 +#: ipaserver/plugins/user.py:970 #, python-format -msgid "Modified automount map \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:436 +#: ipaserver/plugins/user.py:1064 #, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1086 +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1103 +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#: ipaserver/plugins/user.py:1112 +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1144 +msgid "Failed logins" +msgstr "" + +#: ipaserver/plugins/user.py:1148 +msgid "Last successful authentication" +msgstr "" + +#: ipaserver/plugins/user.py:1152 +msgid "Last failed authentication" +msgstr "" + +#: ipaserver/plugins/user.py:1156 +msgid "Time now" +msgstr "" + +#: ipaserver/plugins/user.py:1164 +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#: ipaserver/plugins/user.py:1218 +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#: ipaserver/plugins/user.py:1256 +#, python-format +msgid "%(host)s failed" +msgstr "" + +#: ipaserver/plugins/user.py:1266 +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#: ipaserver/plugins/user.py:1274 +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1280 +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1285 ipaserver/plugins/baseuser.py:947 +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#: ipaserver/plugins/user.py:1290 ipaserver/plugins/baseuser.py:966 +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#: ipaserver/plugins/user.py:1305 +msgid "Add new principal alias to the user entry" +msgstr "" + +#: ipaserver/plugins/user.py:1306 +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/user.py:1311 +msgid "Remove principal alias from the user entry" +msgstr "" + +#: ipaserver/plugins/user.py:1312 +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:35 +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:37 +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:41 +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:44 +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:62 +msgid "DNS server" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:63 +msgid "DNS servers" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:71 +msgid "DNS Servers" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:72 +msgid "DNS Server" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:113 +msgid "DNS Server name" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:119 +msgid "SOA mname override" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:120 +msgid "SOA mname (authoritative server) override" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:126 +msgid "Forwarders" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:128 +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:138 +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#: ipaserver/plugins/dnsserver.py:148 ipaserver/plugins/dns.py:2063 +#: ipaserver/plugins/dns.py:2237 ipaserver/plugins/dns.py:3189 +#: ipaserver/plugins/dns.py:4170 +msgid "DNS is not configured" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:154 +msgid "Modify DNS server configuration" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:157 +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dnsserver.py:162 +msgid "Search for DNS servers." +msgstr "" + +#: ipaserver/plugins/dnsserver.py:166 +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/automount.py:448 -msgid "Automount key object." +#: ipaserver/plugins/dnsserver.py:176 +msgid "IPA DNS Server is not installed" msgstr "" -#: ipaserver/plugins/automount.py:452 -msgid "automount key" +#: ipaserver/plugins/dnsserver.py:183 +msgid "Display configuration of a DNS server." msgstr "" -#: ipaserver/plugins/automount.py:453 -msgid "automount keys" +#: ipaserver/plugins/dnsserver.py:193 +msgid "Add a new DNS server." msgstr "" -#: ipaserver/plugins/automount.py:512 -msgid "Automount Keys" +#: ipaserver/plugins/dnsserver.py:196 +#, python-format +msgid "Added new DNS server \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:513 -msgid "Automount Key" +#: ipaserver/plugins/dnsserver.py:205 +msgid "Delete a DNS server" msgstr "" -#: ipaserver/plugins/automount.py:514 +#: ipaserver/plugins/dnsserver.py:208 +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:43 +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:57 +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:202 +msgid "ID Ranges" +msgstr "" + +#: ipaserver/plugins/idrange.py:203 +msgid "ID Range" +msgstr "" + +#: ipaserver/plugins/idrange.py:207 +msgid "local domain range" +msgstr "" + +#: ipaserver/plugins/idrange.py:209 ipaserver/plugins/trust.py:674 +msgid "Active Directory domain range" +msgstr "" + +#: ipaserver/plugins/idrange.py:210 ipaserver/plugins/trust.py:675 +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +#: ipaserver/plugins/idrange.py:250 +msgid "ID range type, one of allowed values" +msgstr "" + +#: ipaserver/plugins/idrange.py:257 +msgid "Auto creation of private groups, one of allowed values" +msgstr "" + +#: ipaserver/plugins/idrange.py:331 +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +#: ipaserver/plugins/idrange.py:336 +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +#: ipaserver/plugins/idrange.py:343 +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +#: ipaserver/plugins/idrange.py:355 +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +#: ipaserver/plugins/idrange.py:392 +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:418 +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:430 ipaserver/plugins/idrange.py:690 +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:441 +msgid "Specified trusted domain name could not be found." +msgstr "" + +#: ipaserver/plugins/idrange.py:456 +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:463 ipaserver/plugins/idrange.py:725 +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +#: ipaserver/plugins/idrange.py:470 +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +#: ipaserver/plugins/idrange.py:476 +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:495 +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +#: ipaserver/plugins/idrange.py:505 +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" + +#: ipaserver/plugins/idrange.py:512 ipaserver/plugins/idrange.py:744 +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:522 ipaserver/plugins/idrange.py:767 +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +#: ipaserver/plugins/idrange.py:534 +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#: ipaserver/plugins/idrange.py:553 +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:602 +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/idrange.py:638 +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#: ipaserver/plugins/idrange.py:642 +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/idrange.py:674 +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +#: ipaserver/plugins/idrange.py:702 +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +#: ipaserver/plugins/idrange.py:709 +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +#: ipaserver/plugins/idrange.py:716 +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#: ipaserver/plugins/hbac.py:7 +msgid "Host-based access control commands" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:28 +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:62 +msgid "HBAC services" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:95 ipaserver/plugins/hbacrule.py:286 +msgid "HBAC Services" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:96 +msgid "HBAC Service" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:119 +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:127 +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:135 +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvc.py:144 +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/hbacsvcgroup.py:64 +msgid "HBAC service group" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:65 +msgid "HBAC service groups" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:108 ipaserver/plugins/hbacrule.py:290 +msgid "HBAC Service Groups" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:109 +msgid "HBAC Service Group" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:131 +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:139 +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:147 +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacsvcgroup.py:156 +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/delegation.py:67 +msgid "delegation" +msgstr "" + +#: ipaserver/plugins/delegation.py:68 +msgid "delegations" +msgstr "" + +#: ipaserver/plugins/delegation.py:69 +msgid "Delegations" +msgstr "" + +#: ipaserver/plugins/delegation.py:70 +msgid "Delegation" +msgstr "" + +#: ipaserver/plugins/delegation.py:132 +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/delegation.py:153 +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/delegation.py:170 +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/delegation.py:189 +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/schema.py:30 +msgid "" +"\n" +"API Schema\n" +msgstr "" + +#: ipaserver/plugins/schema.py:32 +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +#: ipaserver/plugins/schema.py:36 +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +#: ipaserver/plugins/schema.py:39 +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#: ipaserver/plugins/schema.py:60 +msgid "Documentation" +msgstr "" + +#: ipaserver/plugins/schema.py:65 +msgid "Exclude from" +msgstr "" + +#: ipaserver/plugins/schema.py:70 +msgid "Include in" +msgstr "" + +#: ipaserver/plugins/schema.py:128 ipaserver/plugins/baseldap.py:1949 +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +#: ipaserver/plugins/schema.py:141 +msgid "Help topic" +msgstr "" + +#: ipaserver/plugins/schema.py:178 +msgid "Parameters" +msgstr "" + +#: ipaserver/plugins/schema.py:213 +msgid "Method of" +msgstr "" + +#: ipaserver/plugins/schema.py:218 +msgid "Method name" +msgstr "" + +#: ipaserver/plugins/schema.py:263 ipaserver/plugins/schema.py:332 +#: ipaserver/plugins/schema.py:423 ipaserver/plugins/schema.py:658 +#: ipaserver/plugins/schema.py:751 ipaserver/plugins/baseldap.py:658 +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/schema.py:276 +msgid "Display information about a command." +msgstr "" + +#: ipaserver/plugins/schema.py:281 +msgid "Search for commands." +msgstr "" + +#: ipaserver/plugins/schema.py:286 +msgid "Return command defaults" +msgstr "" + +#: ipaserver/plugins/schema.py:343 +msgid "Display information about a class." +msgstr "" + +#: ipaserver/plugins/schema.py:348 +msgid "Search for classes." +msgstr "" + +#: ipaserver/plugins/schema.py:435 +msgid "Display information about a help topic." +msgstr "" + +#: ipaserver/plugins/schema.py:440 +msgid "Search for help topics." +msgstr "" + +#: ipaserver/plugins/schema.py:452 +msgid "Required" +msgstr "" + +#: ipaserver/plugins/schema.py:457 +msgid "Multi-value" +msgstr "" + +#: ipaserver/plugins/schema.py:505 +msgid "Always ask" +msgstr "" + +#: ipaserver/plugins/schema.py:510 +msgid "CLI metavar" +msgstr "" + +#: ipaserver/plugins/schema.py:515 +msgid "CLI name" +msgstr "" + +#: ipaserver/plugins/schema.py:520 +msgid "Confirm (password)" +msgstr "" + +#: ipaserver/plugins/schema.py:525 +msgid "Default" +msgstr "" + +#: ipaserver/plugins/schema.py:530 +msgid "Default from" +msgstr "" + +#: ipaserver/plugins/schema.py:535 +msgid "Label" +msgstr "" + +#: ipaserver/plugins/schema.py:540 +msgid "Convert on server" +msgstr "" + +#: ipaserver/plugins/schema.py:545 +msgid "Option group" +msgstr "" + +#: ipaserver/plugins/schema.py:550 +msgid "Sensitive" +msgstr "" + +#: ipaserver/plugins/schema.py:555 +msgid "Positional argument" +msgstr "" + +#: ipaserver/plugins/schema.py:640 +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/schema.py:679 +msgid "Display information about a command parameter." +msgstr "" + +#: ipaserver/plugins/schema.py:684 +msgid "Search command parameters." +msgstr "" + +#: ipaserver/plugins/schema.py:741 +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/schema.py:766 +msgid "Display information about a command output." +msgstr "" + +#: ipaserver/plugins/schema.py:771 +msgid "Search for command outputs." +msgstr "" + +#: ipaserver/plugins/schema.py:776 +msgid "Store and provide schema for commands and topics" +msgstr "" + +#: ipaserver/plugins/schema.py:782 +msgid "Fingerprint of schema cached by client" +msgstr "" + +#: ipaserver/plugins/server.py:36 +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +#: ipaserver/plugins/server.py:38 +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +#: ipaserver/plugins/server.py:42 +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +#: ipaserver/plugins/server.py:45 +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#: ipaserver/plugins/server.py:61 +msgid "server" +msgstr "" + +#: ipaserver/plugins/server.py:62 +msgid "servers" +msgstr "" + +#: ipaserver/plugins/server.py:70 +msgid "IPA Servers" +msgstr "" + +#: ipaserver/plugins/server.py:133 +msgid "Server location" +msgstr "" + +#: ipaserver/plugins/server.py:140 +msgid "Service weight" +msgstr "" + +#: ipaserver/plugins/server.py:141 +msgid "Weight for server services" +msgstr "" + +#: ipaserver/plugins/server.py:148 +msgid "Service relative weight" +msgstr "" + +#: ipaserver/plugins/server.py:149 +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#: ipaserver/plugins/server.py:154 +msgid "Enabled server roles" +msgstr "" + +#: ipaserver/plugins/server.py:155 +msgid "List of enabled roles" +msgstr "" + +#: ipaserver/plugins/server.py:222 +msgid "Modify information about an IPA server." +msgstr "" + +#: ipaserver/plugins/server.py:224 +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/server.py:306 +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/server.py:444 +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/server.py:449 +msgid "Ignore topology errors" +msgstr "" + +#: ipaserver/plugins/server.py:450 +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +#: ipaserver/plugins/server.py:455 +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +#: ipaserver/plugins/server.py:456 +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +#: ipaserver/plugins/server.py:462 +msgid "Force server removal" +msgstr "" + +#: ipaserver/plugins/server.py:463 +msgid "Force server removal even if it does not exist" +msgstr "" + +#: ipaserver/plugins/server.py:500 +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +#: ipaserver/plugins/server.py:506 +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +#: ipaserver/plugins/server.py:519 +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +#: ipaserver/plugins/server.py:529 +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +#: ipaserver/plugins/server.py:544 +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#: ipaserver/plugins/server.py:594 #, python-format msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" msgstr "" -#: ipaserver/plugins/automount.py:515 +#: ipaserver/plugins/server.py:615 #, python-format -msgid "key named %(key)s already exists" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" -#: ipaserver/plugins/automount.py:516 +#: ipaserver/plugins/server.py:636 #, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" -#: ipaserver/plugins/automount.py:566 +#: ipaserver/plugins/server.py:662 #, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:700 +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:716 +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +#: ipaserver/plugins/server.py:721 +msgid "You may need to manually remove them from the tree" +msgstr "" + +#: ipaserver/plugins/server.py:736 +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +#: ipaserver/plugins/server.py:746 +msgid "Ignoring topology connectivity errors." +msgstr "" + +#: ipaserver/plugins/server.py:780 +msgid "Server has already been deleted" +msgstr "" + +#: ipaserver/plugins/server.py:830 +msgid "Agreements deleted" +msgstr "" + +#: ipaserver/plugins/server.py:841 +msgid "Following segments were not deleted:" +msgstr "" + +#: ipaserver/plugins/server.py:914 ipaserver/plugins/trust.py:1865 +#, python-format +msgid "must be \"%s\"" +msgstr "" + +#: ipaserver/plugins/server.py:926 +msgid "not allowed to perform server connection check" +msgstr "" + +#: ipaserver/plugins/server.py:952 +msgid "Set enabled/hidden state of a server." +msgstr "" + +#: ipaserver/plugins/server.py:958 +msgid "State" +msgstr "" + +#: ipaserver/plugins/server.py:959 +msgid "Server state" +msgstr "" + +#: ipaserver/plugins/server.py:964 +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +#: ipaserver/plugins/server.py:973 +msgid "Cannot hide CA renewal master." +msgstr "" + +#: ipaserver/plugins/server.py:975 +msgid "Cannot hide DNSSec key master." +msgstr "" + +#: ipaserver/plugins/server.py:987 +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +#: ipaserver/plugins/stageuser.py:65 msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" msgstr "" -#: ipaserver/plugins/automount.py:625 +#: ipaserver/plugins/stageuser.py:128 +msgid "Stage Users" +msgstr "" + +#: ipaserver/plugins/stageuser.py:129 +msgid "Stage User" +msgstr "" + +#: ipaserver/plugins/stageuser.py:130 +msgid "stage user" +msgstr "" + +#: ipaserver/plugins/stageuser.py:131 +msgid "stage users" +msgstr "" + +#: ipaserver/plugins/stageuser.py:278 #, python-format -msgid "Added automount key \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:654 +#: ipaserver/plugins/stageuser.py:297 +msgid "givenname is required" +msgstr "" + +#: ipaserver/plugins/stageuser.py:300 +msgid "sn is required" +msgstr "" + +#: ipaserver/plugins/stageuser.py:418 #, python-format -msgid "Added automount indirect map \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:678 -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#: ipaserver/plugins/automount.py:707 +#: ipaserver/plugins/stageuser.py:424 #, python-format -msgid "Deleted automount key \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:748 +#: ipaserver/plugins/stageuser.py:495 #, python-format -msgid "Modified automount key \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" msgstr "" -#: ipaserver/plugins/automount.py:807 +#: ipaserver/plugins/stageuser.py:508 +msgid "Entry RDN is not 'uid'" +msgstr "" + +#: ipaserver/plugins/stageuser.py:514 #, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#: ipaserver/plugins/stageuser.py:690 +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#: ipaserver/plugins/stageuser.py:754 +#, python-format +msgid "Stage user %s activated" +msgstr "" + +#: ipaserver/plugins/stageuser.py:771 +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:772 +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:777 +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:778 +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:783 +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:784 +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:789 +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#: ipaserver/plugins/stageuser.py:790 +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/stageuser.py:795 +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +#: ipaserver/plugins/stageuser.py:801 +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" #: ipaserver/plugins/idviews.py:72 ipaserver/plugins/idviews.py:123 #: ipaserver/plugins/idviews.py:131 ipaserver/plugins/idviews.py:351 @@ -21807,441 +23780,806 @@ msgid_plural "%(count)d Group ID overrides matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/migration.py:46 -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" +#: ipaserver/plugins/netgroup.py:103 +msgid "netgroups" msgstr "" -#: ipaserver/plugins/migration.py:145 +#: ipaserver/plugins/netgroup.py:197 +msgid "Netgroup" +msgstr "" + +#: ipaserver/plugins/netgroup.py:266 +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/netgroup.py:268 #, python-format msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" -#: ipaserver/plugins/migration.py:146 +#: ipaserver/plugins/netgroup.py:301 #, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." +msgid "Deleted netgroup \"%(value)s\"" msgstr "" -#: ipaserver/plugins/migration.py:147 -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -#: ipaserver/plugins/migration.py:148 -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -#: ipaserver/plugins/migration.py:149 -msgid "Malformed DN" -msgstr "" - -#: ipaserver/plugins/migration.py:194 +#: ipaserver/plugins/netgroup.py:310 #, python-format -msgid "%(user)s is not a POSIX user" +msgid "Modified netgroup \"%(value)s\"" msgstr "" -#: ipaserver/plugins/migration.py:461 -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#: ipaserver/plugins/migration.py:476 -msgid "Invalid LDAP URI." -msgstr "" - -#: ipaserver/plugins/migration.py:678 +#: ipaserver/plugins/netgroup.py:339 #, python-format -msgid "%s to exclude from migration" -msgstr "" - -#: ipaserver/plugins/migration.py:680 -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#: ipaserver/plugins/migration.py:769 -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#: ipaserver/plugins/migration.py:804 ipaserver/plugins/user.py:588 -msgid "Default group for new users not found" -msgstr "" - -#: ipaserver/plugins/caacl.py:21 -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#: ipaserver/plugins/caacl.py:87 ipaserver/plugins/caacl.py:165 -#: ipaserver/plugins/caacl.py:263 -msgid "CA ACL" -msgstr "" - -#: ipaserver/plugins/caacl.py:88 ipaserver/plugins/caacl.py:164 -msgid "CA ACLs" -msgstr "" - -#: ipaserver/plugins/caacl.py:183 -msgid "CA category" -msgstr "" - -#: ipaserver/plugins/caacl.py:184 -msgid "CA category the ACL applies to" -msgstr "" - -#: ipaserver/plugins/caacl.py:212 -msgid "CAs" -msgstr "" - -#: ipaserver/plugins/caacl.py:246 -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:258 -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:265 -msgid "default CA ACL can be only disabled" -msgstr "" - -#: ipaserver/plugins/caacl.py:273 -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:285 -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -#: ipaserver/plugins/caacl.py:290 -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -#: ipaserver/plugins/caacl.py:294 ipaserver/plugins/netgroup.py:321 -#: ipaserver/plugins/hbacrule.py:345 -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -#: ipaserver/plugins/caacl.py:298 ipaserver/plugins/netgroup.py:326 -#: ipaserver/plugins/hbacrule.py:350 -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#: ipaserver/plugins/caacl.py:302 ipaserver/plugins/hbacrule.py:356 -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#: ipaserver/plugins/caacl.py:312 -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/caacl.py:325 +#: ipaserver/plugins/sudo.py:7 +msgid "commands for controlling sudo configuration" +msgstr "" + +#: ipaserver/plugins/whoami.py:15 +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +#: ipaserver/plugins/whoami.py:77 +msgid "Describe currently authenticated identity." +msgstr "" + +#: ipaserver/plugins/whoami.py:82 ipaserver/plugins/whoami.py:88 +msgid "Object class name" +msgstr "" + +#: ipaserver/plugins/whoami.py:83 ipaserver/plugins/whoami.py:89 +msgid "Function to get details" +msgstr "" + +#: ipaserver/plugins/whoami.py:84 ipaserver/plugins/whoami.py:91 +msgid "Arguments to details function" +msgstr "" + +#: ipaserver/plugins/whoami.py:111 +msgid "Cannot query Directory Manager with API" +msgstr "" + +#: ipaserver/plugins/pkinit.py:13 +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +#: ipaserver/plugins/pkinit.py:39 +msgid "pkinit" +msgstr "" + +#: ipaserver/plugins/pkinit.py:53 +msgid "PKINIT status" +msgstr "" + +#: ipaserver/plugins/pkinit.py:54 +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +#: ipaserver/plugins/pkinit.py:63 +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#: ipaserver/plugins/pkinit.py:65 #, python-format -msgid "Enabled CA ACL \"%(value)s\"" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/passwd.py:40 +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" msgstr "" -#: ipaserver/plugins/caacl.py:354 +#: ipaserver/plugins/passwd.py:114 +msgid "The OTP if the user has a token configured" +msgstr "" + +#: ipaserver/plugins/passwd.py:120 #, python-format -msgid "Disabled CA ACL \"%(value)s\"" +msgid "Changed password for \"%(value)s\"" msgstr "" -#: ipaserver/plugins/caacl.py:385 +#: ipaserver/plugins/permission.py:40 +msgid "" +"\n" +"Permissions\n" +msgstr "" + +#: ipaserver/plugins/permission.py:42 +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:48 +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:50 +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:56 +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:62 +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +#: ipaserver/plugins/permission.py:72 +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:76 +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +#: ipaserver/plugins/permission.py:81 +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:88 +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +#: ipaserver/plugins/permission.py:90 +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:94 +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +#: ipaserver/plugins/permission.py:99 +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +#: ipaserver/plugins/permission.py:102 +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#: ipaserver/plugins/permission.py:129 +msgid "must be enclosed in parentheses" +msgstr "" + +#: ipaserver/plugins/permission.py:149 #, python-format -msgid "%i user or group added." +msgid "\"%s\" is not an object type" msgstr "" -#: ipaserver/plugins/caacl.py:386 +#: ipaserver/plugins/permission.py:151 ipaserver/plugins/permission.py:897 #, python-format -msgid "%i users or groups added." +msgid "\"%s\" is not a valid permission type" msgstr "" -#: ipaserver/plugins/caacl.py:407 +#: ipaserver/plugins/permission.py:353 #, python-format -msgid "%i user or group removed." +msgid "Deprecated; use %s" msgstr "" -#: ipaserver/plugins/caacl.py:408 +#: ipaserver/plugins/permission.py:370 #, python-format -msgid "%i users or groups removed." +msgid "Permission with unknown flag %s may not be modified or removed" msgstr "" -#: ipaserver/plugins/caacl.py:417 +#: ipaserver/plugins/permission.py:374 +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#: ipaserver/plugins/permission.py:624 #, python-format -msgid "%i host or hostgroup added." +msgid "Entry %s not found" msgstr "" -#: ipaserver/plugins/caacl.py:418 +#: ipaserver/plugins/permission.py:716 #, python-format -msgid "%i hosts or hostgroups added." +msgid "The ACI for permission %(name)s was not found in %(dn)s " msgstr "" -#: ipaserver/plugins/caacl.py:439 +#: ipaserver/plugins/permission.py:820 +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#: ipaserver/plugins/permission.py:843 #, python-format -msgid "%i host or hostgroup removed." +msgid "option was renamed; use %s" msgstr "" -#: ipaserver/plugins/caacl.py:440 +#: ipaserver/plugins/permission.py:847 #, python-format -msgid "%i hosts or hostgroups removed." +msgid "Cannot use %(old_name)s with %(new_name)s" msgstr "" -#: ipaserver/plugins/caacl.py:448 +#: ipaserver/plugins/permission.py:861 ipaserver/plugins/permission.py:876 #, python-format -msgid "%i service added." +msgid "%s: group not found" msgstr "" -#: ipaserver/plugins/caacl.py:448 +#: ipaserver/plugins/permission.py:871 +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +#: ipaserver/plugins/permission.py:892 +msgid "subtree and type are mutually exclusive" +msgstr "" + +#: ipaserver/plugins/permission.py:930 +msgid "Bad search filter" +msgstr "" + +#: ipaserver/plugins/permission.py:940 #, python-format -msgid "%i services added." +msgid "Entry %s does not exist" msgstr "" -#: ipaserver/plugins/caacl.py:459 ipaserver/plugins/hbacrule.py:606 -msgid "services cannot be added when service category='all'" +#: ipaserver/plugins/permission.py:949 +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" msgstr "" -#: ipaserver/plugins/caacl.py:468 +#: ipaserver/plugins/permission.py:961 ipaserver/plugins/permission.py:989 #, python-format -msgid "%i service removed." +msgid "Added permission \"%(value)s\"" msgstr "" -#: ipaserver/plugins/caacl.py:468 +#: ipaserver/plugins/permission.py:1014 +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#: ipaserver/plugins/permission.py:1046 #, python-format -msgid "%i services removed." +msgid "Cannot store permission ACI to %s" msgstr "" -#: ipaserver/plugins/caacl.py:488 +#: ipaserver/plugins/permission.py:1057 #, python-format -msgid "%i profile added." +msgid "Deleted permission \"%(value)s\"" msgstr "" -#: ipaserver/plugins/caacl.py:488 +#: ipaserver/plugins/permission.py:1077 +msgid "cannot delete managed permissions" +msgstr "" + +#: ipaserver/plugins/permission.py:1083 #, python-format -msgid "%i profiles added." +msgid "ACI of permission %s was not found" msgstr "" -#: ipaserver/plugins/caacl.py:499 -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:510 +#: ipaserver/plugins/permission.py:1092 #, python-format -msgid "%i profile removed." +msgid "Modified permission \"%(value)s\"" msgstr "" -#: ipaserver/plugins/caacl.py:510 +#: ipaserver/plugins/permission.py:1125 +msgid "cannot rename managed permissions" +msgstr "" + +#: ipaserver/plugins/permission.py:1132 ipaserver/plugins/permission.py:1136 +msgid "not modifiable on managed permissions" +msgstr "" + +#: ipaserver/plugins/permission.py:1143 +msgid "only available on managed permissions" +msgstr "" + +#: ipaserver/plugins/permission.py:1150 ipaserver/plugins/permission.py:1276 +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +#: ipaserver/plugins/permission.py:1161 +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#: ipaserver/plugins/permission.py:1265 #, python-format -msgid "%i profiles removed." +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/selinuxusermap.py:89 +msgid "HBAC rule and local members cannot both be set" msgstr "" -#: ipaserver/plugins/caacl.py:515 -msgid "Add CAs to a CA ACL." +#: ipaserver/plugins/selinuxusermap.py:128 +msgid "Invalid SELinux user name, must match {}" msgstr "" -#: ipaserver/plugins/caacl.py:520 +#: ipaserver/plugins/selinuxusermap.py:142 +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:147 +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:161 +msgid "SELinux user map list not found in configuration" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:166 #, python-format -msgid "%i CA added." +msgid "SELinux user %(user)s not found in ordering list (in config)" msgstr "" -#: ipaserver/plugins/caacl.py:520 +#: ipaserver/plugins/selinuxusermap.py:176 +msgid "SELinux User Map rule" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:177 +msgid "SELinux User Map rules" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:233 +msgid "SELinux User Maps" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:234 +msgid "SELinux User Map" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:309 #, python-format -msgid "%i CAs added." +msgid "HBAC rule %(rule)s not found" msgstr "" -#: ipaserver/plugins/caacl.py:531 -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:537 -msgid "Remove CAs from a CA ACL." -msgstr "" - -#: ipaserver/plugins/caacl.py:542 +#: ipaserver/plugins/selinuxusermap.py:330 #, python-format -msgid "%i CA removed." +msgid "Added SELinux User Map \"%(value)s\"" msgstr "" -#: ipaserver/plugins/caacl.py:542 +#: ipaserver/plugins/selinuxusermap.py:368 #, python-format -msgid "%i CAs removed." +msgid "Deleted SELinux User Map \"%(value)s\"" msgstr "" -#: ipaserver/plugins/virtual.py:57 -msgid "operation not defined" -msgstr "" - -#: ipaserver/plugins/virtual.py:82 +#: ipaserver/plugins/selinuxusermap.py:376 #, python-format -msgid "not allowed to perform operation: %s" +msgid "Modified SELinux User Map \"%(value)s\"" msgstr "" -#: ipaserver/plugins/virtual.py:84 -msgid "No such virtual command" +#: ipaserver/plugins/selinuxusermap.py:449 +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/selinuxusermap.py:499 +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/selinuxusermap.py:529 +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:33 +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:55 +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:64 +msgid "sudo command" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:65 +msgid "sudo commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:117 +msgid "Sudo Commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:154 +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:160 +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:193 +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:201 +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/sudorule.py:43 +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:45 +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:50 +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:59 +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:63 +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:66 +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:73 +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:76 +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:80 +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:83 +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:86 +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:89 +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:92 +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:111 +msgid "this option has been deprecated." +msgstr "" + +#: ipaserver/plugins/sudorule.py:139 +msgid "sudo rules" +msgstr "" + +#: ipaserver/plugins/sudorule.py:227 +msgid "Sudo Rules" +msgstr "" + +#: ipaserver/plugins/sudorule.py:228 +msgid "Sudo Rule" +msgstr "" + +#: ipaserver/plugins/sudorule.py:363 +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#: ipaserver/plugins/sudorule.py:394 +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudorule.py:401 +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudorule.py:408 +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudorule.py:427 +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#: ipaserver/plugins/sudorule.py:443 +msgid "command" +msgstr "" + +#: ipaserver/plugins/sudorule.py:443 +msgid "commands" +msgstr "" + +#: ipaserver/plugins/sudorule.py:449 +msgid "runAs user" +msgstr "" + +#: ipaserver/plugins/sudorule.py:449 +msgid "runAs users" +msgstr "" + +#: ipaserver/plugins/sudorule.py:454 +msgid "group runAs" +msgstr "" + +#: ipaserver/plugins/sudorule.py:454 +msgid "runAs groups" +msgstr "" + +#: ipaserver/plugins/sudorule.py:475 +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/sudorule.py:547 +msgid "commands cannot be added when command category='all'" +msgstr "" + +#: ipaserver/plugins/sudorule.py:809 ipaserver/plugins/sudorule.py:931 +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#: ipaserver/plugins/sudorule.py:816 +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#: ipaserver/plugins/sudorule.py:824 +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#: ipaserver/plugins/sudorule.py:938 +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" msgstr "" #: ipaserver/plugins/trust.py:83 @@ -22426,14 +24764,6 @@ msgid "" " " msgstr "" -#: ipaserver/plugins/trust.py:674 ipaserver/plugins/idrange.py:205 -msgid "Active Directory domain range" -msgstr "" - -#: ipaserver/plugins/trust.py:675 ipaserver/plugins/idrange.py:206 -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - #: ipaserver/plugins/trust.py:712 msgid "Type of trusted domain ID range, one of allowed values" msgstr "" @@ -22701,11 +25031,6 @@ msgstr "" msgid "Enable support for trusted domains for old clients" msgstr "" -#: ipaserver/plugins/trust.py:1865 ipaserver/plugins/server.py:914 -#, python-format -msgid "must be \"%s\"" -msgstr "" - #: ipaserver/plugins/trust.py:1871 msgid "not allowed to remotely add agent" msgstr "" @@ -22730,1165 +25055,6 @@ msgid "" "itself" msgstr "" -#: ipaserver/plugins/dnsserver.py:35 -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:37 -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:41 -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:44 -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:62 -msgid "DNS server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:63 -msgid "DNS servers" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:71 -msgid "DNS Servers" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:72 -msgid "DNS Server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:113 -msgid "DNS Server name" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:119 -msgid "SOA mname override" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:120 -msgid "SOA mname (authoritative server) override" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:126 -msgid "Forwarders" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:128 -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:138 -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:148 ipaserver/plugins/dns.py:2056 -#: ipaserver/plugins/dns.py:2230 ipaserver/plugins/dns.py:3182 -#: ipaserver/plugins/dns.py:4163 -msgid "DNS is not configured" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:154 -msgid "Modify DNS server configuration" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:157 -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:162 -msgid "Search for DNS servers." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:166 -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/dnsserver.py:176 -msgid "IPA DNS Server is not installed" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:183 -msgid "Display configuration of a DNS server." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:193 -msgid "Add a new DNS server." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:196 -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:205 -msgid "Delete a DNS server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:208 -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:74 -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -#: ipaserver/plugins/host.py:82 -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -#: ipaserver/plugins/host.py:94 -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -#: ipaserver/plugins/host.py:106 -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/host.py:109 -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:112 -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:115 -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:118 -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:121 -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:124 -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:127 -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -#: ipaserver/plugins/host.py:130 -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/host.py:509 -msgid "Base-64 encoded host certificate" -msgstr "" - -#: ipaserver/plugins/host.py:576 ipaserver/plugins/baseuser.py:353 -msgid "SSH public key fingerprint" -msgstr "" - -#: ipaserver/plugins/host.py:663 -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:687 ipaserver/plugins/user.py:558 -#: ipaserver/plugins/stageuser.py:329 ipaserver/plugins/stageuser.py:533 -#: ipaserver/plugins/baseuser.py:569 -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#: ipaserver/plugins/host.py:785 -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:790 -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -#: ipaserver/plugins/host.py:869 -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#: ipaserver/plugins/host.py:885 -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:905 -msgid "Password cannot be set on enrolled host." -msgstr "" - -#: ipaserver/plugins/host.py:909 -msgid "cn is immutable" -msgstr "" - -#: ipaserver/plugins/host.py:1033 -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/host.py:1188 -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1363 -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1370 -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1386 -msgid "Add new principal alias to host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1387 -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1398 -msgid "Remove principal alias from a host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1399 -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbac.py:7 -msgid "Host-based access control commands" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:28 -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:62 -msgid "HBAC services" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:95 ipaserver/plugins/hbacrule.py:286 -msgid "HBAC Services" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:96 -msgid "HBAC Service" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:119 -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:127 -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:135 -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:144 -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hbacsvcgroup.py:64 -msgid "HBAC service group" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:65 -msgid "HBAC service groups" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:108 ipaserver/plugins/hbacrule.py:290 -msgid "HBAC Service Groups" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:109 -msgid "HBAC Service Group" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:131 -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:139 -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:147 -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:156 -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/delegation.py:67 -msgid "delegation" -msgstr "" - -#: ipaserver/plugins/delegation.py:68 -msgid "delegations" -msgstr "" - -#: ipaserver/plugins/delegation.py:69 -msgid "Delegations" -msgstr "" - -#: ipaserver/plugins/delegation.py:70 -msgid "Delegation" -msgstr "" - -#: ipaserver/plugins/delegation.py:132 -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:153 -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:170 -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:189 -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/privilege.py:76 -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:149 -msgid "Privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:169 -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:176 -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:183 -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:191 -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/role.py:143 -msgid "Role" -msgstr "" - -#: ipaserver/plugins/role.py:164 -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:172 -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:180 -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:189 -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idrange.py:43 -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:57 -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:198 -msgid "ID Ranges" -msgstr "" - -#: ipaserver/plugins/idrange.py:199 -msgid "ID Range" -msgstr "" - -#: ipaserver/plugins/idrange.py:203 -msgid "local domain range" -msgstr "" - -#: ipaserver/plugins/idrange.py:246 -msgid "ID range type, one of allowed values" -msgstr "" - -#: ipaserver/plugins/idrange.py:321 -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -#: ipaserver/plugins/idrange.py:326 -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -#: ipaserver/plugins/idrange.py:333 -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/idrange.py:345 -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:382 -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:404 -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:416 ipaserver/plugins/idrange.py:666 -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:427 -msgid "Specified trusted domain name could not be found." -msgstr "" - -#: ipaserver/plugins/idrange.py:442 -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:449 ipaserver/plugins/idrange.py:701 -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -#: ipaserver/plugins/idrange.py:456 -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -#: ipaserver/plugins/idrange.py:462 -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:481 -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -#: ipaserver/plugins/idrange.py:488 ipaserver/plugins/idrange.py:720 -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:498 ipaserver/plugins/idrange.py:743 -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -#: ipaserver/plugins/idrange.py:510 -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#: ipaserver/plugins/idrange.py:529 -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:578 -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idrange.py:614 -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:618 -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:650 -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -#: ipaserver/plugins/idrange.py:678 -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -#: ipaserver/plugins/idrange.py:685 -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:692 -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/netgroup.py:103 -msgid "netgroups" -msgstr "" - -#: ipaserver/plugins/netgroup.py:197 -msgid "Netgroup" -msgstr "" - -#: ipaserver/plugins/netgroup.py:266 -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:268 -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#: ipaserver/plugins/netgroup.py:301 -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:310 -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:339 -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/user.py:492 -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:591 -msgid "Default group for new users is not POSIX" -msgstr "" - -#: ipaserver/plugins/user.py:680 -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:698 -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#: ipaserver/plugins/user.py:809 -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:842 ipaserver/plugins/stageuser.py:471 -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/user.py:920 -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:934 -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#: ipaserver/plugins/user.py:965 -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1059 -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1081 -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1098 -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#: ipaserver/plugins/user.py:1107 -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1139 -msgid "Failed logins" -msgstr "" - -#: ipaserver/plugins/user.py:1143 -msgid "Last successful authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1147 -msgid "Last failed authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1151 -msgid "Time now" -msgstr "" - -#: ipaserver/plugins/user.py:1159 -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#: ipaserver/plugins/user.py:1213 -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#: ipaserver/plugins/user.py:1251 -#, python-format -msgid "%(host)s failed" -msgstr "" - -#: ipaserver/plugins/user.py:1261 -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#: ipaserver/plugins/user.py:1269 -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1275 -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1280 ipaserver/plugins/baseuser.py:947 -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#: ipaserver/plugins/user.py:1285 ipaserver/plugins/baseuser.py:966 -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#: ipaserver/plugins/user.py:1300 -msgid "Add new principal alias to the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1301 -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1306 -msgid "Remove principal alias from the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1307 -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudo.py:7 -msgid "commands for controlling sudo configuration" -msgstr "" - -#: ipaserver/plugins/whoami.py:15 -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -#: ipaserver/plugins/whoami.py:77 -msgid "Describe currently authenticated identity." -msgstr "" - -#: ipaserver/plugins/whoami.py:82 ipaserver/plugins/whoami.py:88 -msgid "Object class name" -msgstr "" - -#: ipaserver/plugins/whoami.py:83 ipaserver/plugins/whoami.py:89 -msgid "Function to get details" -msgstr "" - -#: ipaserver/plugins/whoami.py:84 ipaserver/plugins/whoami.py:91 -msgid "Arguments to details function" -msgstr "" - -#: ipaserver/plugins/whoami.py:111 -msgid "Cannot query Directory Manager with API" -msgstr "" - -#: ipaserver/plugins/pkinit.py:13 -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -#: ipaserver/plugins/pkinit.py:39 -msgid "pkinit" -msgstr "" - -#: ipaserver/plugins/pkinit.py:53 -msgid "PKINIT status" -msgstr "" - -#: ipaserver/plugins/pkinit.py:54 -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -#: ipaserver/plugins/pkinit.py:63 -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#: ipaserver/plugins/pkinit.py:65 -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - #: ipaserver/plugins/automember.py:43 msgid "" "\n" @@ -24300,490 +25466,51 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -#: ipaserver/plugins/selinuxusermap.py:89 -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:128 -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:142 -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:147 -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:161 -msgid "SELinux user map list not found in configuration" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:166 -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:176 -msgid "SELinux User Map rule" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:177 -msgid "SELinux User Map rules" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:233 -msgid "SELinux User Maps" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:234 -msgid "SELinux User Map" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:309 -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:330 -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:368 -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:376 -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:449 -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/selinuxusermap.py:491 -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:521 -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:54 +#: ipaserver/plugins/batch.py:35 msgid "" "\n" -"Vaults\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" msgstr "" -#: ipaserver/plugins/vault.py:56 +#: ipaserver/plugins/batch.py:71 +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +#: ipaserver/plugins/batch.py:122 +msgid "must contain a tuple (list, dict)" +msgstr "" + +#: ipaserver/plugins/session.py:12 msgid "" "\n" -"Manage vaults.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:58 -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:62 -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -#: ipaserver/plugins/vault.py:67 -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:72 -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -#: ipaserver/plugins/vault.py:78 -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:82 -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:86 -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:92 -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:96 -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -#: ipaserver/plugins/vault.py:101 -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:106 -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -#: ipaserver/plugins/vault.py:111 -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:115 -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -#: ipaserver/plugins/vault.py:120 -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:127 -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -#: ipaserver/plugins/vault.py:140 -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -#: ipaserver/plugins/vault.py:146 -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:150 -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -#: ipaserver/plugins/vault.py:153 -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -#: ipaserver/plugins/vault.py:158 -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:164 -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -#: ipaserver/plugins/vault.py:169 -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -#: ipaserver/plugins/vault.py:174 -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:180 -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -#: ipaserver/plugins/vault.py:185 -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:190 -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:195 -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:200 -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:252 -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#: ipaserver/plugins/vault.py:258 -msgid "vaultcontainer" -msgstr "" - -#: ipaserver/plugins/vault.py:259 -msgid "vaultcontainers" -msgstr "" - -#: ipaserver/plugins/vault.py:267 -msgid "Vault Containers" -msgstr "" - -#: ipaserver/plugins/vault.py:268 -msgid "Vault Container" -msgstr "" - -#: ipaserver/plugins/vault.py:357 -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:367 ipaserver/plugins/vault.py:683 -msgid "Host is not supported" -msgstr "" - -#: ipaserver/plugins/vault.py:409 ipaserver/plugins/vault.py:433 -#: ipaserver/plugins/vault.py:786 ipaserver/plugins/vault.py:824 -#: ipaserver/plugins/vault.py:880 ipaserver/plugins/vault.py:936 -#: ipaserver/plugins/vault.py:958 ipaserver/plugins/vault.py:1000 -#: ipaserver/plugins/vault.py:1044 ipaserver/plugins/vault.py:1113 -msgid "KRA service is not enabled" -msgstr "" - -#: ipaserver/plugins/vault.py:424 -msgid "Deleted vault container" -msgstr "" - -#: ipaserver/plugins/vault.py:449 ipaserver/plugins/vault.py:474 -#: ipaserver/plugins/vault.py:1164 ipaserver/plugins/vault.py:1189 -#, python-format -msgid "owner %s" -msgstr "" - -#: ipaserver/plugins/vault.py:494 -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -#: ipaserver/plugins/vault.py:500 -msgid "vault" -msgstr "" - -#: ipaserver/plugins/vault.py:501 -msgid "vaults" -msgstr "" - -#: ipaserver/plugins/vault.py:524 -msgid "Vaults" -msgstr "" - -#: ipaserver/plugins/vault.py:525 -msgid "Vault" -msgstr "" - -#: ipaserver/plugins/vault.py:668 -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:772 -msgid "Add a vault." -msgstr "" - -#: ipaserver/plugins/vault.py:778 -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:817 -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:869 -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/vault.py:887 -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:927 -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:969 -msgid "Vault configuration" -msgstr "" - -#: ipaserver/plugins/vault.py:979 -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#: ipaserver/plugins/vault.py:1038 -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:1094 -msgid "Retrieve data from a vault." -msgstr "" - -#: ipaserver/plugins/vault.py:1107 -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:1133 -msgid "No archived data." -msgstr "" - -#: ipaserver/plugins/vault.py:1223 -msgid "Checks if any of the servers has the KRA service enabled" +"Session Support for IPA\n" msgstr "" #: ipaserver/plugins/baseldap.py:101 @@ -24918,806 +25645,194 @@ msgstr "" msgid "one or more values to remove" msgstr "" -#: ipaserver/plugins/server.py:36 +#: ipaserver/plugins/certprofile.py:21 msgid "" "\n" -"IPA servers\n" -msgstr "" - -#: ipaserver/plugins/server.py:38 -msgid "" +"Manage Certificate Profiles\n" "\n" -"Get information about installed IPA servers.\n" -msgstr "" - -#: ipaserver/plugins/server.py:42 -msgid "" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/server.py:45 -msgid "" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#: ipaserver/plugins/server.py:61 -msgid "server" -msgstr "" - -#: ipaserver/plugins/server.py:62 -msgid "servers" -msgstr "" - -#: ipaserver/plugins/server.py:70 -msgid "IPA Servers" -msgstr "" - -#: ipaserver/plugins/server.py:133 -msgid "Server location" -msgstr "" - -#: ipaserver/plugins/server.py:140 -msgid "Service weight" -msgstr "" - -#: ipaserver/plugins/server.py:141 -msgid "Weight for server services" -msgstr "" - -#: ipaserver/plugins/server.py:148 -msgid "Service relative weight" -msgstr "" - -#: ipaserver/plugins/server.py:149 -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#: ipaserver/plugins/server.py:154 -msgid "Enabled server roles" -msgstr "" - -#: ipaserver/plugins/server.py:155 -msgid "List of enabled roles" -msgstr "" - -#: ipaserver/plugins/server.py:222 -msgid "Modify information about an IPA server." -msgstr "" - -#: ipaserver/plugins/server.py:224 -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:306 -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/server.py:444 -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:449 -msgid "Ignore topology errors" -msgstr "" - -#: ipaserver/plugins/server.py:450 -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -#: ipaserver/plugins/server.py:455 -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -#: ipaserver/plugins/server.py:456 -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -#: ipaserver/plugins/server.py:462 -msgid "Force server removal" -msgstr "" - -#: ipaserver/plugins/server.py:463 -msgid "Force server removal even if it does not exist" -msgstr "" - -#: ipaserver/plugins/server.py:500 -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -#: ipaserver/plugins/server.py:506 -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -#: ipaserver/plugins/server.py:519 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -#: ipaserver/plugins/server.py:529 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -#: ipaserver/plugins/server.py:544 -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#: ipaserver/plugins/server.py:594 -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:615 -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:636 -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:662 -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:700 -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:716 -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:721 -msgid "You may need to manually remove them from the tree" -msgstr "" - -#: ipaserver/plugins/server.py:736 -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -#: ipaserver/plugins/server.py:746 -msgid "Ignoring topology connectivity errors." -msgstr "" - -#: ipaserver/plugins/server.py:780 -msgid "Server has already been deleted" -msgstr "" - -#: ipaserver/plugins/server.py:830 -msgid "Agreements deleted" -msgstr "" - -#: ipaserver/plugins/server.py:841 -msgid "Following segments were not deleted:" -msgstr "" - -#: ipaserver/plugins/server.py:926 -msgid "not allowed to perform server connection check" -msgstr "" - -#: ipaserver/plugins/server.py:952 -msgid "Set enabled/hidden state of a server." -msgstr "" - -#: ipaserver/plugins/server.py:958 -msgid "State" -msgstr "" - -#: ipaserver/plugins/server.py:959 -msgid "Server state" -msgstr "" - -#: ipaserver/plugins/server.py:964 -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -#: ipaserver/plugins/server.py:973 -msgid "Cannot hide CA renewal master." -msgstr "" - -#: ipaserver/plugins/server.py:975 -msgid "Cannot hide DNSSec key master." -msgstr "" - -#: ipaserver/plugins/server.py:987 -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#: ipaserver/plugins/ca.py:20 -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -#: ipaserver/plugins/ca.py:22 -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:25 -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:28 -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:32 -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:37 -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -#: ipaserver/plugins/ca.py:43 -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:47 -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:51 -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:68 ipaserver/plugins/ca.py:78 -msgid "Certificate Authority" -msgstr "" - -#: ipaserver/plugins/ca.py:69 ipaserver/plugins/ca.py:77 -msgid "Certificate Authorities" -msgstr "" - -#: ipaserver/plugins/ca.py:85 -msgid "Name for referencing the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:90 -msgid "Description of the purpose of the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:94 -msgid "Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:95 -msgid "Dogtag Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:100 ipaserver/plugins/ca.py:286 -msgid "Subject DN" -msgstr "" - -#: ipaserver/plugins/ca.py:101 -msgid "Subject Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:107 -msgid "Issuer Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:218 -msgid "Search for CAs." -msgstr "" - -#: ipaserver/plugins/ca.py:220 -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/ca.py:243 -msgid "Display the properties of a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:260 -msgid "Create a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:261 -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:271 -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#: ipaserver/plugins/ca.py:287 -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/ca.py:302 -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -#: ipaserver/plugins/ca.py:326 -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#: ipaserver/plugins/ca.py:328 -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:337 -msgid "Insufficient privilege to delete a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:343 -msgid "IPA CA cannot be deleted" -msgstr "" - -#: ipaserver/plugins/ca.py:352 -msgid "Must be disabled first" -msgstr "" - -#: ipaserver/plugins/ca.py:360 -msgid "Modify CA configuration." -msgstr "" - -#: ipaserver/plugins/ca.py:361 -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:387 -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:403 -msgid "Disable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:404 -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:411 -msgid "IPA CA cannot be disabled" -msgstr "" - -#: ipaserver/plugins/ca.py:421 -msgid "Enable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:422 -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:65 -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"PROFILE ID SYNTAX:\n" "\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" msgstr "" -#: ipaserver/plugins/stageuser.py:128 -msgid "Stage Users" +#: ipaserver/plugins/certprofile.py:95 +msgid "invalid Profile ID" msgstr "" -#: ipaserver/plugins/stageuser.py:129 -msgid "Stage User" +#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 +msgid "Certificate Profile" msgstr "" -#: ipaserver/plugins/stageuser.py:130 -msgid "stage user" +#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 +msgid "Certificate Profiles" msgstr "" -#: ipaserver/plugins/stageuser.py:131 -msgid "stage users" +#: ipaserver/plugins/certprofile.py:126 +msgid "Profile configuration" msgstr "" -#: ipaserver/plugins/stageuser.py:278 +#: ipaserver/plugins/certprofile.py:190 #, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:297 -msgid "givenname is required" -msgstr "" - -#: ipaserver/plugins/stageuser.py:300 -msgid "sn is required" -msgstr "" - -#: ipaserver/plugins/stageuser.py:418 -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:424 -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:495 -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:508 -msgid "Entry RDN is not 'uid'" -msgstr "" - -#: ipaserver/plugins/stageuser.py:514 -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#: ipaserver/plugins/stageuser.py:690 -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#: ipaserver/plugins/stageuser.py:754 -#, python-format -msgid "Stage user %s activated" -msgstr "" - -#: ipaserver/plugins/stageuser.py:771 -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:772 -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:777 -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:778 -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:783 -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:784 -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:789 -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:790 -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:795 -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -#: ipaserver/plugins/stageuser.py:801 -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -#: ipaserver/plugins/baseuser.py:57 -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#: ipaserver/plugins/baseuser.py:88 -msgid "must be TRUE or FALSE" -msgstr "" - -#: ipaserver/plugins/baseuser.py:145 -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#: ipaserver/plugins/baseuser.py:269 -msgid "User password expiration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:410 -msgid "SMB logon script path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:415 -msgid "SMB profile path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:420 -msgid "SMB Home Directory" -msgstr "" - -#: ipaserver/plugins/baseuser.py:425 -msgid "SMB Home Directory Drive" -msgstr "" - -#: ipaserver/plugins/baseuser.py:449 ipaserver/plugins/baseuser.py:453 -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#: ipaserver/plugins/baseuser.py:480 -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#: ipaserver/plugins/baseuser.py:827 -msgid "Issuer of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:834 -msgid "Subject of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:879 -msgid "cannot have an empty subject" -msgstr "" - -#: ipaserver/plugins/baseuser.py:919 -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:923 -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#: ipaserver/plugins/baseuser.py:948 -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/baseuser.py:967 -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:42 -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:44 -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:46 -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:51 -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:54 -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:57 -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:60 -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:137 -msgid "OTP token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:138 -msgid "OTP tokens" -msgstr "" - -#: ipaserver/plugins/otptoken.py:154 -msgid "OTP Tokens" -msgstr "" - -#: ipaserver/plugins/otptoken.py:155 -msgid "OTP Token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:272 -msgid "URI" -msgstr "" - -#: ipaserver/plugins/otptoken.py:281 -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:335 -msgid "cannot be empty" -msgstr "" - -#: ipaserver/plugins/otptoken.py:367 -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:373 -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:422 -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/batch.py:35 -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" +#: ipaserver/plugins/certprofile.py:222 +#, python-format +msgid "Imported profile \"%(value)s\"" msgstr "" -#: ipaserver/plugins/batch.py:71 -msgid "Make multiple ipa calls via one remote procedure call" +#: ipaserver/plugins/certprofile.py:247 +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" msgstr "" -#: ipaserver/plugins/batch.py:122 -msgid "must contain a tuple (list, dict)" +#: ipaserver/plugins/certprofile.py:255 +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#: ipaserver/plugins/certprofile.py:282 +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:289 +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#: ipaserver/plugins/certprofile.py:305 +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:322 +msgid "Certificate profiles cannot be renamed" +msgstr "" + +#: ipaserver/plugins/certprofile.py:327 +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +#: ipaserver/plugins/dogtag.py:1251 +msgid "REST API is not logged in." +msgstr "" + +#: ipaserver/plugins/dogtag.py:1273 +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1299 +msgid "Unable to communicate with CMS" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1490 ipaserver/plugins/dogtag.py:1576 +#: ipaserver/plugins/dogtag.py:2082 ipaserver/plugins/dogtag.py:2092 +msgid "Response from CA was not valid JSON" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:108 +msgid "The deny type has been deprecated." +msgstr "" + +#: ipaserver/plugins/hbacrule.py:131 +msgid "HBAC rules" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:201 +msgid "HBAC Rules" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:302 +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:316 +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:333 +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:368 +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/hbacrule.py:383 +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:413 +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:447 ipaserver/plugins/hbacrule.py:478 +msgid "Access time" +msgstr "" + +#: ipaserver/plugins/hbacrule.py:565 +msgid "Add source hosts and hostgroups to an HBAC rule." msgstr "" #: ipaserver/plugins/dns.py:100 @@ -26210,82 +26325,89 @@ msgid "" "All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" -#: ipaserver/plugins/dns.py:564 +#: ipaserver/plugins/dns.py:561 +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" + +#: ipaserver/plugins/dns.py:571 #, python-format msgid "" "DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " "server" msgstr "" -#: ipaserver/plugins/dns.py:581 +#: ipaserver/plugins/dns.py:588 #, python-format msgid "DNS zone %(zone)s not found" msgstr "" -#: ipaserver/plugins/dns.py:596 +#: ipaserver/plugins/dns.py:603 #, python-format msgid "IP address %(ip)s is already assigned in domain %(domain)s." msgstr "" -#: ipaserver/plugins/dns.py:606 +#: ipaserver/plugins/dns.py:613 #, python-format msgid "" "Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." msgstr "" -#: ipaserver/plugins/dns.py:681 +#: ipaserver/plugins/dns.py:688 #, python-format msgid "%s record" msgstr "" -#: ipaserver/plugins/dns.py:683 +#: ipaserver/plugins/dns.py:690 #, python-format msgid "Raw %s records" msgstr "" -#: ipaserver/plugins/dns.py:684 +#: ipaserver/plugins/dns.py:691 #, python-format msgid "%s Record" msgstr "" -#: ipaserver/plugins/dns.py:685 +#: ipaserver/plugins/dns.py:692 #, python-format msgid "(see RFC %s for details)" msgstr "" -#: ipaserver/plugins/dns.py:747 +#: ipaserver/plugins/dns.py:754 #, python-format msgid "'%s' is a required part of DNS record" msgstr "" -#: ipaserver/plugins/dns.py:754 +#: ipaserver/plugins/dns.py:761 msgid "Invalid number of parts!" msgstr "" -#: ipaserver/plugins/dns.py:806 +#: ipaserver/plugins/dns.py:813 #, python-format msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" msgstr "" -#: ipaserver/plugins/dns.py:822 +#: ipaserver/plugins/dns.py:829 #, python-format msgid "format must be specified as \"%(format)s\" %(rfcs)s" msgstr "" -#: ipaserver/plugins/dns.py:897 +#: ipaserver/plugins/dns.py:904 msgid "Create reverse" msgstr "" -#: ipaserver/plugins/dns.py:933 +#: ipaserver/plugins/dns.py:940 #, python-format msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" msgstr "" -#: ipaserver/plugins/dns.py:1108 ipaserver/plugins/dns.py:1265 +#: ipaserver/plugins/dns.py:1115 ipaserver/plugins/dns.py:1272 msgid "Exchanger" msgstr "" -#: ipaserver/plugins/dns.py:1183 +#: ipaserver/plugins/dns.py:1190 msgid "" "format must be specified as\n" " \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " @@ -26300,563 +26422,405 @@ msgid "" " See RFC 1876 for details" msgstr "" -#: ipaserver/plugins/dns.py:1237 +#: ipaserver/plugins/dns.py:1244 #, python-format msgid "'%(required)s' must not be empty when '%(name)s' is set" msgstr "" -#: ipaserver/plugins/dns.py:1292 +#: ipaserver/plugins/dns.py:1299 msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" msgstr "" -#: ipaserver/plugins/dns.py:1353 ipaserver/plugins/dns.py:1483 +#: ipaserver/plugins/dns.py:1360 ipaserver/plugins/dns.py:1490 msgid "Priority (order)" msgstr "" -#: ipaserver/plugins/dns.py:1354 +#: ipaserver/plugins/dns.py:1361 msgid "" "Lower number means higher priority. Clients will attempt to contact the " "server with the lowest-numbered priority they can reach." msgstr "" -#: ipaserver/plugins/dns.py:1362 ipaserver/plugins/dns.py:1492 +#: ipaserver/plugins/dns.py:1369 ipaserver/plugins/dns.py:1499 msgid "Relative weight for entries with the same priority." msgstr "" -#: ipaserver/plugins/dns.py:1382 +#: ipaserver/plugins/dns.py:1389 msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" msgstr "" -#: ipaserver/plugins/dns.py:1484 +#: ipaserver/plugins/dns.py:1491 msgid "" "Lower number means higher priority. Clients will attempt to contact the URI " "with the lowest-numbered priority they can reach." msgstr "" -#: ipaserver/plugins/dns.py:1497 +#: ipaserver/plugins/dns.py:1504 msgid "Target Uniform Resource Identifier" msgstr "" -#: ipaserver/plugins/dns.py:1498 +#: ipaserver/plugins/dns.py:1505 msgid "Target Uniform Resource Identifier according to RFC 3986" msgstr "" -#: ipaserver/plugins/dns.py:1580 +#: ipaserver/plugins/dns.py:1587 #, python-format msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" msgstr "" -#: ipaserver/plugins/dns.py:2049 +#: ipaserver/plugins/dns.py:2056 msgid "Managedby permission" msgstr "" -#: ipaserver/plugins/dns.py:2150 +#: ipaserver/plugins/dns.py:2157 msgid "cannot be used when a zone is specified" msgstr "" -#: ipaserver/plugins/dns.py:2162 +#: ipaserver/plugins/dns.py:2169 msgid "Only one zone type is allowed per zone name" msgstr "" -#: ipaserver/plugins/dns.py:2305 +#: ipaserver/plugins/dns.py:2312 #, python-format msgid "Added system permission \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:2335 +#: ipaserver/plugins/dns.py:2342 #, python-format msgid "permission \"%(value)s\" already exists" msgstr "" -#: ipaserver/plugins/dns.py:2363 +#: ipaserver/plugins/dns.py:2370 #, python-format msgid "Removed system permission \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:2399 +#: ipaserver/plugins/dns.py:2406 msgid "DNS zone" msgstr "" -#: ipaserver/plugins/dns.py:2400 +#: ipaserver/plugins/dns.py:2407 msgid "DNS zones" msgstr "" -#: ipaserver/plugins/dns.py:2408 +#: ipaserver/plugins/dns.py:2415 msgid "DNS Zones" msgstr "" -#: ipaserver/plugins/dns.py:2409 +#: ipaserver/plugins/dns.py:2416 msgid "DNS Zone" msgstr "" -#: ipaserver/plugins/dns.py:2481 +#: ipaserver/plugins/dns.py:2488 msgid "Default time to live" msgstr "" -#: ipaserver/plugins/dns.py:2482 +#: ipaserver/plugins/dns.py:2489 msgid "Time to live for records without explicit TTL definition" msgstr "" -#: ipaserver/plugins/dns.py:2697 +#: ipaserver/plugins/dns.py:2704 msgid "setting Authoritative nameserver" msgstr "" -#: ipaserver/plugins/dns.py:2698 +#: ipaserver/plugins/dns.py:2705 msgid "It is used only for setting the SOA MNAME attribute." msgstr "" -#: ipaserver/plugins/dns.py:2700 +#: ipaserver/plugins/dns.py:2707 msgid "NS record(s) can be edited in zone apex - '@'. " msgstr "" -#: ipaserver/plugins/dns.py:2735 +#: ipaserver/plugins/dns.py:2742 msgid "" msgstr "" -#: ipaserver/plugins/dns.py:2791 +#: ipaserver/plugins/dns.py:2798 msgid "Nameserver for reverse zone cannot be a relative DNS name" msgstr "" -#: ipaserver/plugins/dns.py:2846 +#: ipaserver/plugins/dns.py:2853 #, python-format msgid "Deleted DNS zone \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:2899 +#: ipaserver/plugins/dns.py:2906 msgid "is required" msgstr "" -#: ipaserver/plugins/dns.py:2980 +#: ipaserver/plugins/dns.py:2987 #, python-format msgid "Disabled DNS zone \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:2991 +#: ipaserver/plugins/dns.py:2998 #, python-format msgid "Enabled DNS zone \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:3016 +#: ipaserver/plugins/dns.py:3023 msgid "DNS resource record" msgstr "" -#: ipaserver/plugins/dns.py:3017 +#: ipaserver/plugins/dns.py:3024 msgid "DNS resource records" msgstr "" -#: ipaserver/plugins/dns.py:3024 +#: ipaserver/plugins/dns.py:3031 msgid "DNS Resource Records" msgstr "" -#: ipaserver/plugins/dns.py:3025 +#: ipaserver/plugins/dns.py:3032 msgid "DNS Resource Record" msgstr "" -#: ipaserver/plugins/dns.py:3060 +#: ipaserver/plugins/dns.py:3067 msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" msgstr "" -#: ipaserver/plugins/dns.py:3077 +#: ipaserver/plugins/dns.py:3084 msgid "" "out-of-zone data: record name must be a subdomain of the zone or a relative " "name" msgstr "" -#: ipaserver/plugins/dns.py:3088 +#: ipaserver/plugins/dns.py:3095 #, python-format msgid "" "owner of %(types)s records should not be a wildcard domain name (RFC 4592 " "section 4)" msgstr "" -#: ipaserver/plugins/dns.py:3133 +#: ipaserver/plugins/dns.py:3140 #, python-format msgid "" "Reverse zone %(name)s requires exactly %(count)d IP address components, " "%(user_count)d given" msgstr "" -#: ipaserver/plugins/dns.py:3175 +#: ipaserver/plugins/dns.py:3182 msgid "only master zones can contain records" msgstr "" -#: ipaserver/plugins/dns.py:3273 +#: ipaserver/plugins/dns.py:3280 msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" msgstr "" -#: ipaserver/plugins/dns.py:3279 +#: ipaserver/plugins/dns.py:3286 msgid "" "CNAME record is not allowed to coexist with any other record (RFC 1034, " "section 3.6.2)" msgstr "" -#: ipaserver/plugins/dns.py:3287 +#: ipaserver/plugins/dns.py:3294 msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" msgstr "" -#: ipaserver/plugins/dns.py:3303 +#: ipaserver/plugins/dns.py:3310 #, python-format msgid "" "NS record is not allowed to coexist with an %(type)s record except when " "located in a zone root record (RFC 2181, section 6.1)" msgstr "" -#: ipaserver/plugins/dns.py:3319 +#: ipaserver/plugins/dns.py:3326 msgid "" "DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " "4035 section 2.4)" msgstr "" -#: ipaserver/plugins/dns.py:3600 +#: ipaserver/plugins/dns.py:3607 #, python-format msgid "Raw value of a DNS record was already set by \"%(name)s\" option" msgstr "" -#: ipaserver/plugins/dns.py:3726 +#: ipaserver/plugins/dns.py:3733 msgid "DNS zone root record cannot be renamed" msgstr "" -#: ipaserver/plugins/dns.py:3744 +#: ipaserver/plugins/dns.py:3751 msgid "DNS records can be only updated one at a time" msgstr "" -#: ipaserver/plugins/dns.py:3837 +#: ipaserver/plugins/dns.py:3844 #, python-format msgid "Deleted record \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:3930 +#: ipaserver/plugins/dns.py:3937 #, python-format msgid "Zone record '%s' cannot be deleted" msgstr "" -#: ipaserver/plugins/dns.py:4032 +#: ipaserver/plugins/dns.py:4039 #, python-format msgid "Found '%(value)s'" msgstr "" -#: ipaserver/plugins/dns.py:4047 +#: ipaserver/plugins/dns.py:4054 #, python-format msgid "Host '%(host)s' not found" msgstr "" -#: ipaserver/plugins/dns.py:4078 +#: ipaserver/plugins/dns.py:4085 msgid "DNS configuration options" msgstr "" -#: ipaserver/plugins/dns.py:4083 ipaserver/plugins/dns.py:4084 +#: ipaserver/plugins/dns.py:4090 ipaserver/plugins/dns.py:4091 msgid "DNS Global Configuration" msgstr "" -#: ipaserver/plugins/dns.py:4115 +#: ipaserver/plugins/dns.py:4122 msgid "IPA DNS version" msgstr "" -#: ipaserver/plugins/dns.py:4120 +#: ipaserver/plugins/dns.py:4127 msgid "List of IPA masters configured as DNS servers" msgstr "" -#: ipaserver/plugins/dns.py:4126 +#: ipaserver/plugins/dns.py:4133 msgid "IPA server configured as DNSSec key master" msgstr "" -#: ipaserver/plugins/dns.py:4177 +#: ipaserver/plugins/dns.py:4184 msgid "Global DNS configuration is empty" msgstr "" -#: ipaserver/plugins/dns.py:4258 +#: ipaserver/plugins/dns.py:4265 msgid "DNS forward zone" msgstr "" -#: ipaserver/plugins/dns.py:4259 +#: ipaserver/plugins/dns.py:4266 msgid "DNS forward zones" msgstr "" -#: ipaserver/plugins/dns.py:4261 +#: ipaserver/plugins/dns.py:4268 msgid "DNS Forward Zones" msgstr "" -#: ipaserver/plugins/dns.py:4262 +#: ipaserver/plugins/dns.py:4269 msgid "DNS Forward Zone" msgstr "" -#: ipaserver/plugins/dns.py:4369 ipaserver/plugins/dns.py:4419 +#: ipaserver/plugins/dns.py:4376 ipaserver/plugins/dns.py:4426 msgid "Please specify forwarders." msgstr "" -#: ipaserver/plugins/dns.py:4388 +#: ipaserver/plugins/dns.py:4395 #, python-format msgid "Deleted DNS forward zone \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:4445 +#: ipaserver/plugins/dns.py:4452 #, python-format msgid "Disabled DNS forward zone \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:4451 +#: ipaserver/plugins/dns.py:4458 #, python-format msgid "Enabled DNS forward zone \"%(value)s\"" msgstr "" -#: ipaserver/plugins/dns.py:4474 +#: ipaserver/plugins/dns.py:4481 msgid "IPA DNS records" msgstr "" -#: ipaserver/plugins/dns.py:4478 +#: ipaserver/plugins/dns.py:4485 msgid "IPA location records" msgstr "" -#: ipaserver/plugins/dns.py:4485 +#: ipaserver/plugins/dns.py:4492 msgid "Update location and IPA server DNS records" msgstr "" -#: ipaserver/plugins/dns.py:4496 +#: ipaserver/plugins/dns.py:4503 msgid "Result of the command" msgstr "" -#: ipaserver/plugins/dns.py:4503 +#: ipaserver/plugins/dns.py:4510 msgid "Dry run" msgstr "" -#: ipaserver/plugins/dns.py:4504 +#: ipaserver/plugins/dns.py:4511 msgid "Do not update records only return expected records" msgstr "" -#: ipaserver/plugins/hbacrule.py:108 -msgid "The deny type has been deprecated." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:131 -msgid "HBAC rules" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:201 -msgid "HBAC Rules" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:302 -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:316 -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:333 -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:368 -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hbacrule.py:383 -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:413 -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:447 ipaserver/plugins/hbacrule.py:478 -msgid "Access time" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:565 -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -#: ipaserver/plugins/certprofile.py:21 +#: ipaserver/plugins/baseuser.py:57 msgid "" "\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +"Baseuser\n" "\n" +"This contains common definitions for user/stageuser\n" msgstr "" -#: ipaserver/plugins/certprofile.py:95 -msgid "invalid Profile ID" +#: ipaserver/plugins/baseuser.py:88 +msgid "must be TRUE or FALSE" msgstr "" -#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 -msgid "Certificate Profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 -msgid "Certificate Profiles" -msgstr "" - -#: ipaserver/plugins/certprofile.py:126 -msgid "Profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:190 -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certprofile.py:222 -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:247 -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#: ipaserver/plugins/certprofile.py:255 -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#: ipaserver/plugins/certprofile.py:282 -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:289 -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#: ipaserver/plugins/certprofile.py:305 -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:322 -msgid "Certificate profiles cannot be renamed" -msgstr "" - -#: ipaserver/plugins/certprofile.py:327 -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#: ipaserver/servroles.py:296 -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#: ipaserver/servroles.py:401 -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -#: ipaserver/servroles.py:443 -msgid "must be enabled only on a single master" -msgstr "" - -#: ipaserver/rpcserver.py:549 -msgid "Request must be a dict" -msgstr "" - -#: ipaserver/rpcserver.py:551 -msgid "Request is missing \"method\"" -msgstr "" - -#: ipaserver/rpcserver.py:553 -msgid "Request is missing \"params\"" -msgstr "" - -#: ipaserver/rpcserver.py:558 -msgid "params must be a list" -msgstr "" - -#: ipaserver/rpcserver.py:560 -msgid "params must contain [args, options]" -msgstr "" - -#: ipaserver/rpcserver.py:563 -msgid "params[0] (aka args) must be a list" -msgstr "" - -#: ipaserver/rpcserver.py:566 -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#: ipaserver/topology.py:14 -#, python-format +#: ipaserver/plugins/baseuser.py:145 msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." msgstr "" -#: ipaserver/topology.py:18 -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" +#: ipaserver/plugins/baseuser.py:269 +msgid "User password expiration" msgstr "" -#: ipaserver/topology.py:121 +#: ipaserver/plugins/baseuser.py:410 +msgid "SMB logon script path" +msgstr "" + +#: ipaserver/plugins/baseuser.py:415 +msgid "SMB profile path" +msgstr "" + +#: ipaserver/plugins/baseuser.py:420 +msgid "SMB Home Directory" +msgstr "" + +#: ipaserver/plugins/baseuser.py:425 +msgid "SMB Home Directory Drive" +msgstr "" + +#: ipaserver/plugins/baseuser.py:449 ipaserver/plugins/baseuser.py:453 #, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#: ipaserver/plugins/baseuser.py:480 +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#: ipaserver/plugins/baseuser.py:827 +msgid "Issuer of the certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:834 +msgid "Subject of the certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:879 +msgid "cannot have an empty subject" +msgstr "" + +#: ipaserver/plugins/baseuser.py:919 +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +#: ipaserver/plugins/baseuser.py:923 +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +#: ipaserver/plugins/baseuser.py:948 +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/baseuser.py:967 +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" msgstr "" #: ipaserver/dcerpc_common.py:20 @@ -26896,6 +26860,70 @@ msgstr "" msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "" +#: ipaserver/rpcserver.py:549 +msgid "Request must be a dict" +msgstr "" + +#: ipaserver/rpcserver.py:551 +msgid "Request is missing \"method\"" +msgstr "" + +#: ipaserver/rpcserver.py:553 +msgid "Request is missing \"params\"" +msgstr "" + +#: ipaserver/rpcserver.py:558 +msgid "params must be a list" +msgstr "" + +#: ipaserver/rpcserver.py:560 +msgid "params must contain [args, options]" +msgstr "" + +#: ipaserver/rpcserver.py:563 +msgid "params[0] (aka args) must be a list" +msgstr "" + +#: ipaserver/rpcserver.py:566 +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#: ipaserver/servroles.py:296 +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#: ipaserver/servroles.py:401 +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +#: ipaserver/servroles.py:443 +msgid "must be enabled only on a single master" +msgstr "" + +#: ipaserver/topology.py:14 +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#: ipaserver/topology.py:18 +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#: ipaserver/topology.py:121 +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + #: ipaserver/dcerpc.py:87 msgid "" "\n"