From 4d1ce5c4c36035ea5802146ee86bcc08ea33409e Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy Date: Wed, 27 Jan 2021 10:49:06 +0200 Subject: [PATCH] Force-update translation after FreeIPA to IPA change: po/ipa.pot Signed-off-by: Alexander Bokovoy --- po/ipa.pot | 7400 ++++++++++++++++++++++++++-------------------------- 1 file changed, 3698 insertions(+), 3702 deletions(-) diff --git a/po/ipa.pot b/po/ipa.pot index 59d47b3ec..87dead74f 100644 --- a/po/ipa.pot +++ b/po/ipa.pot @@ -6,9 +6,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: freeipa 4.10.0.dev202101270756+gitfdd5ba3f4\n" +"Project-Id-Version: freeipa 4.10.0.dev202101270847+git7cc7756dc\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:31+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" @@ -337,6 +337,125 @@ msgstr "" msgid "The hostname must not be: %s\n" msgstr "" +#: client/ipa-rmkeytab.c:51 +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#: client/ipa-rmkeytab.c:53 +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:63 +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:76 +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#: client/ipa-rmkeytab.c:80 +#, c-format +msgid "principal not found\n" +msgstr "" + +#: client/ipa-rmkeytab.c:82 +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:90 +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#: client/ipa-rmkeytab.c:92 +#, c-format +msgid "kvno %d\n" +msgstr "" + +#: client/ipa-rmkeytab.c:93 +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:124 client/ipa-rmkeytab.c:146 +#: client/ipa-rmkeytab.c:160 client/ipa-rmkeytab.c:263 +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#: client/ipa-rmkeytab.c:133 +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#: client/ipa-rmkeytab.c:135 +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:169 +#, c-format +msgid "realm not found\n" +msgstr "" + +#: client/ipa-rmkeytab.c:195 +msgid "Print debugging information" +msgstr "" + +#: client/ipa-rmkeytab.c:195 +msgid "Debugging output" +msgstr "" + +#: client/ipa-rmkeytab.c:197 +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +#: client/ipa-rmkeytab.c:198 client/ipa-getkeytab.c:769 +msgid "Kerberos Service Principal Name" +msgstr "" + +#: client/ipa-rmkeytab.c:200 +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +#: client/ipa-rmkeytab.c:200 client/ipa-getkeytab.c:773 +msgid "Keytab File Name" +msgstr "" + +#: client/ipa-rmkeytab.c:202 +msgid "Remove all principals in this realm" +msgstr "" + +#: client/ipa-rmkeytab.c:202 ipaclient/remote_plugins/2_114/trust.py:111 +msgid "Realm name" +msgstr "" + +#: client/ipa-rmkeytab.c:216 client/ipa-getkeytab.c:822 +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#: client/ipa-rmkeytab.c:256 +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#: client/ipa-rmkeytab.c:279 +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#: client/ipa-rmkeytab.c:281 +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + #: client/config.c:56 #, c-format msgid "cannot open configuration file %s\n" @@ -513,20 +632,12 @@ msgstr "" msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" -#: client/ipa-getkeytab.c:769 client/ipa-rmkeytab.c:198 -msgid "Kerberos Service Principal Name" -msgstr "" - #: client/ipa-getkeytab.c:771 msgid "" "The keytab file to append the new key to (will be created if it does not " "exist)." msgstr "" -#: client/ipa-getkeytab.c:773 client/ipa-rmkeytab.c:200 -msgid "Keytab File Name" -msgstr "" - #: client/ipa-getkeytab.c:775 msgid "Encryption types to request" msgstr "" @@ -595,11 +706,6 @@ msgstr "" msgid "Retrieve current keys without changing them" msgstr "" -#: client/ipa-getkeytab.c:822 client/ipa-rmkeytab.c:216 -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - #: client/ipa-getkeytab.c:835 util/ipa_krb5.c:892 #, c-format msgid "No system preferred enctypes ?!\n" @@ -719,112 +825,6 @@ msgstr "" msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "" -#: client/ipa-rmkeytab.c:51 -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#: client/ipa-rmkeytab.c:53 -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:63 -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:76 -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#: client/ipa-rmkeytab.c:80 -#, c-format -msgid "principal not found\n" -msgstr "" - -#: client/ipa-rmkeytab.c:82 -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:90 -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#: client/ipa-rmkeytab.c:92 -#, c-format -msgid "kvno %d\n" -msgstr "" - -#: client/ipa-rmkeytab.c:93 -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:124 client/ipa-rmkeytab.c:146 -#: client/ipa-rmkeytab.c:160 client/ipa-rmkeytab.c:263 -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#: client/ipa-rmkeytab.c:133 -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#: client/ipa-rmkeytab.c:135 -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:169 -#, c-format -msgid "realm not found\n" -msgstr "" - -#: client/ipa-rmkeytab.c:195 -msgid "Print debugging information" -msgstr "" - -#: client/ipa-rmkeytab.c:195 -msgid "Debugging output" -msgstr "" - -#: client/ipa-rmkeytab.c:197 -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#: client/ipa-rmkeytab.c:200 -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -#: client/ipa-rmkeytab.c:202 -msgid "Remove all principals in this realm" -msgstr "" - -#: client/ipa-rmkeytab.c:202 ipaclient/remote_plugins/2_114/trust.py:111 -msgid "Realm name" -msgstr "" - -#: client/ipa-rmkeytab.c:256 -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#: client/ipa-rmkeytab.c:279 -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#: client/ipa-rmkeytab.c:281 -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - #: ipaclient/frontend.py:28 ipaclient/frontend.py:90 #: ipaserver/plugins/baseldap.py:53 msgid "Failed members" @@ -1044,14 +1044,14 @@ msgid "" "reading/writing YubiKey tokens directly.\n" msgstr "" -#: ipaclient/plugins/otptoken_yubikey.py:47 ipaserver/plugins/sudorule.py:71 -#: ipaserver/plugins/otptoken.py:49 ipaserver/plugins/dnsserver.py:39 -#: ipaserver/plugins/host.py:104 ipaserver/plugins/vault.py:90 -#: ipaserver/plugins/radiusproxy.py:43 ipaserver/plugins/cert.py:99 -#: ipaserver/plugins/permission.py:97 ipaserver/plugins/location.py:37 +#: ipaclient/plugins/otptoken_yubikey.py:47 ipaserver/plugins/dnsserver.py:39 +#: ipaserver/plugins/vault.py:90 ipaserver/plugins/radiusproxy.py:43 +#: ipaserver/plugins/permission.py:97 ipaserver/plugins/otptoken.py:49 +#: ipaserver/plugins/sudorule.py:71 ipaserver/plugins/location.py:37 #: ipaserver/plugins/schema.py:34 ipaserver/plugins/serverrole.py:19 -#: ipaserver/plugins/certmap.py:60 ipaserver/plugins/automember.py:63 +#: ipaserver/plugins/cert.py:99 ipaserver/plugins/automember.py:63 #: ipaserver/plugins/ca.py:35 ipaserver/plugins/server.py:40 +#: ipaserver/plugins/host.py:104 ipaserver/plugins/certmap.py:60 msgid "" "\n" "EXAMPLES:\n" @@ -1253,8 +1253,8 @@ msgid "User ID" msgstr "" #: ipaclient/plugins/otptoken.py:143 ipaclient/remote_plugins/2_114/host.py:187 -#: ipaserver/plugins/internal.py:190 ipaserver/plugins/internal.py:408 -#: ipaserver/plugins/internal.py:1694 ipaserver/plugins/migration.py:534 +#: ipaserver/plugins/internal.py:408 ipaserver/plugins/internal.py:1694 +#: ipaserver/plugins/migration.py:534 ipaserver/plugins/baseldap.py:50 #: ipaserver/plugins/baseuser.py:277 msgid "Password" msgstr "" @@ -1588,8 +1588,8 @@ msgid "User group ACI grants access to" msgstr "" #: ipaserver/plugins/aci.py:463 ipaserver/plugins/permission.py:230 -#: ipaserver/plugins/selfservice.py:84 ipaserver/plugins/baseldap.py:74 -#: ipaserver/plugins/delegation.py:81 +#: ipaserver/plugins/selfservice.py:84 ipaserver/plugins/delegation.py:81 +#: ipaserver/plugins/baseldap.py:74 msgid "Permissions" msgstr "" @@ -1604,8 +1604,8 @@ msgstr "" msgid "Attributes" msgstr "" -#: ipaserver/plugins/otptoken.py:165 ipaserver/plugins/vault.py:600 -#: ipaserver/plugins/aci.py:477 ipaserver/plugins/permission.py:346 +#: ipaserver/plugins/vault.py:600 ipaserver/plugins/aci.py:477 +#: ipaserver/plugins/permission.py:346 ipaserver/plugins/otptoken.py:165 #: ipaserver/plugins/schema.py:447 msgid "Type" msgstr "" @@ -1706,7 +1706,8 @@ msgstr "" msgid "A string searched in all relevant object attributes" msgstr "" -#: ipaserver/plugins/schema.py:127 ipaserver/plugins/baseldap.py:1948 +#: ipaserver/plugins/schema.py:127 ipaserver/plugins/cert.py:1563 +#: ipaserver/plugins/baseldap.py:1948 msgid "Primary key only" msgstr "" @@ -1861,7 +1862,7 @@ msgstr "" msgid "description" msgstr "" -#: ipaserver/plugins/host.py:478 ipaserver/plugins/server.py:132 +#: ipaserver/plugins/server.py:132 ipaserver/plugins/host.py:478 msgid "Location" msgstr "" @@ -1877,17 +1878,17 @@ msgstr "" msgid "Automount map name." msgstr "" -#: ipaserver/plugins/automount.py:364 ipaserver/plugins/sudorule.py:238 -#: ipaserver/plugins/caacl.py:175 ipaserver/plugins/otptoken.py:174 +#: ipaserver/plugins/automount.py:364 ipaserver/plugins/caacl.py:175 #: ipaserver/plugins/hbacsvc.py:108 ipaserver/plugins/hbacsvcgroup.py:120 -#: ipaserver/plugins/host.py:468 ipaserver/plugins/hostgroup.py:193 -#: ipaserver/plugins/vault.py:594 ipaserver/plugins/netgroup.py:210 -#: ipaserver/plugins/radiusproxy.py:117 ipaserver/plugins/group.py:342 -#: ipaserver/plugins/sudocmd.py:122 ipaserver/plugins/sudocmdgroup.py:130 -#: ipaserver/plugins/location.py:111 ipaserver/plugins/selinuxusermap.py:265 -#: ipaserver/plugins/idviews.py:142 ipaserver/plugins/idviews.py:775 -#: ipaserver/plugins/certmap.py:279 ipaserver/plugins/automember.py:257 +#: ipaserver/plugins/hostgroup.py:193 ipaserver/plugins/vault.py:594 +#: ipaserver/plugins/netgroup.py:210 ipaserver/plugins/radiusproxy.py:117 +#: ipaserver/plugins/group.py:342 ipaserver/plugins/otptoken.py:174 +#: ipaserver/plugins/sudorule.py:238 ipaserver/plugins/sudocmd.py:122 +#: ipaserver/plugins/sudocmdgroup.py:130 ipaserver/plugins/location.py:111 +#: ipaserver/plugins/selinuxusermap.py:265 ipaserver/plugins/idviews.py:142 +#: ipaserver/plugins/idviews.py:775 ipaserver/plugins/automember.py:257 #: ipaserver/plugins/ca.py:89 ipaserver/plugins/role.py:153 +#: ipaserver/plugins/host.py:468 ipaserver/plugins/certmap.py:279 #: ipaserver/plugins/privilege.py:159 ipaserver/plugins/hbacrule.py:253 msgid "Description" msgstr "" @@ -1924,7 +1925,7 @@ msgstr "" msgid "Search for an automount key." msgstr "" -#: ipaserver/plugins/cert.py:1568 ipaserver/plugins/serverrole.py:123 +#: ipaserver/plugins/serverrole.py:123 ipaserver/plugins/cert.py:1568 #: ipaserver/plugins/baseldap.py:1967 msgid "Time Limit" msgstr "" @@ -1932,8 +1933,8 @@ msgstr "" msgid "Time limit of search in seconds" msgstr "" -#: ipaserver/plugins/cert.py:1573 ipaserver/plugins/serverrole.py:131 -#: ipaserver/plugins/baseldap.py:1974 ipaserver/plugins/hbactest.py:304 +#: ipaserver/plugins/serverrole.py:131 ipaserver/plugins/cert.py:1573 +#: ipaserver/plugins/hbactest.py:304 ipaserver/plugins/baseldap.py:1974 msgid "Size Limit" msgstr "" @@ -2565,7 +2566,7 @@ msgid "" "standard format \"IP_ADDRESS port PORT\"" msgstr "" -#: ipaserver/plugins/dns.py:2042 ipaserver/plugins/dns.py:4096 +#: ipaserver/plugins/dns.py:4096 ipaserver/plugins/dnsserver.py:136 msgid "Forward policy" msgstr "" @@ -2643,7 +2644,7 @@ msgstr "" msgid "A IP Address" msgstr "" -#: ipaserver/plugins/dns.py:953 ipaserver/plugins/dns.py:976 +#: ipaserver/plugins/dns.py:976 ipaserver/plugins/host.py:675 msgid "IP Address" msgstr "" @@ -2722,8 +2723,8 @@ msgstr "" msgid "CERT Algorithm" msgstr "" -#: ipaserver/plugins/dns.py:1013 ipaserver/plugins/dns.py:1056 -#: ipaserver/plugins/dns.py:1405 +#: ipaserver/plugins/dns.py:1056 ipaserver/plugins/dns.py:1405 +#: ipaserver/plugins/otptoken.py:229 msgid "Algorithm" msgstr "" @@ -2784,7 +2785,7 @@ msgstr "" msgid "DNAME Target" msgstr "" -#: ipaserver/plugins/dns.py:1041 ipaserver/plugins/dns.py:1372 +#: ipaserver/plugins/dns.py:1372 ipaserver/plugins/internal.py:1217 msgid "Target" msgstr "" @@ -2971,8 +2972,7 @@ msgid "NAPTR Service" msgstr "" #: ipaserver/plugins/internal.py:1331 ipaserver/plugins/internal.py:1656 -#: ipaserver/plugins/dns.py:1317 ipaserver/plugins/service.py:467 -#: ipaserver/plugins/hbactest.py:285 +#: ipaserver/plugins/service.py:467 ipaserver/plugins/hbactest.py:285 msgid "Service" msgstr "" @@ -3054,7 +3054,7 @@ msgstr "" msgid "SRV Priority" msgstr "" -#: ipaserver/plugins/certmap.py:304 ipaserver/plugins/pwpolicy.py:341 +#: ipaserver/plugins/pwpolicy.py:341 ipaserver/plugins/certmap.py:304 msgid "Priority" msgstr "" @@ -3292,8 +3292,8 @@ msgstr "" msgid "Add new DNS resource record." msgstr "" -#: ipaserver/plugins/realmdomains.py:151 ipaserver/plugins/permission.py:1061 -#: ipaserver/plugins/dns.py:2881 ipaserver/plugins/dns.py:3569 +#: ipaserver/plugins/dns.py:3569 ipaserver/plugins/permission.py:1061 +#: ipaserver/plugins/realmdomains.py:151 ipaserver/plugins/host.py:667 #: ipaserver/plugins/service.py:628 msgid "Force" msgstr "" @@ -3432,24 +3432,23 @@ msgstr "" msgid "Rule type (allow)" msgstr "" -#: ipaserver/plugins/sudorule.py:246 ipaserver/plugins/caacl.py:195 -#: ipaserver/plugins/netgroup.py:227 ipaserver/plugins/selinuxusermap.py:253 -#: ipaserver/plugins/hbacrule.py:223 +#: ipaserver/plugins/netgroup.py:227 ipaserver/plugins/sudorule.py:246 +#: ipaserver/plugins/selinuxusermap.py:253 ipaserver/plugins/hbacrule.py:223 msgid "User category" msgstr "" -#: ipaserver/plugins/sudorule.py:247 ipaserver/plugins/netgroup.py:228 +#: ipaserver/plugins/netgroup.py:228 ipaserver/plugins/sudorule.py:247 #: ipaserver/plugins/selinuxusermap.py:254 ipaserver/plugins/hbacrule.py:224 msgid "User category the rule applies to" msgstr "" -#: ipaserver/plugins/sudorule.py:252 ipaserver/plugins/caacl.py:201 -#: ipaserver/plugins/netgroup.py:233 ipaserver/plugins/selinuxusermap.py:259 +#: ipaserver/plugins/caacl.py:201 ipaserver/plugins/netgroup.py:233 +#: ipaserver/plugins/sudorule.py:252 ipaserver/plugins/selinuxusermap.py:259 #: ipaserver/plugins/hbacrule.py:229 msgid "Host category" msgstr "" -#: ipaserver/plugins/sudorule.py:253 ipaserver/plugins/netgroup.py:234 +#: ipaserver/plugins/netgroup.py:234 ipaserver/plugins/sudorule.py:253 #: ipaserver/plugins/selinuxusermap.py:260 ipaserver/plugins/hbacrule.py:230 msgid "Host category the rule applies to" msgstr "" @@ -3462,37 +3461,34 @@ msgstr "" msgid "Service category the rule applies to" msgstr "" -#: ipaserver/plugins/sudorule.py:241 ipaserver/plugins/caacl.py:178 -#: ipaserver/plugins/selinuxusermap.py:268 ipaserver/plugins/certmap.py:310 -#: ipaserver/plugins/internal.py:1915 ipaserver/plugins/hbacrule.py:256 +#: ipaserver/plugins/sudorule.py:241 ipaserver/plugins/selinuxusermap.py:268 +#: ipaserver/plugins/internal.py:1915 ipaserver/plugins/certmap.py:310 +#: ipaserver/plugins/hbacrule.py:256 msgid "Enabled" msgstr "" -#: ipaserver/plugins/sudorule.py:282 ipaserver/plugins/caacl.py:220 -#: ipaserver/plugins/selinuxusermap.py:272 ipaserver/plugins/automember.py:697 -#: ipaserver/plugins/internal.py:1189 ipaserver/plugins/hbacrule.py:260 -#: ipaserver/plugins/baseuser.py:196 ipaserver/plugins/user.py:160 +#: ipaserver/plugins/sudorule.py:282 ipaserver/plugins/selinuxusermap.py:272 +#: ipaserver/plugins/automember.py:697 ipaserver/plugins/internal.py:1189 +#: ipaserver/plugins/hbacrule.py:260 ipaserver/plugins/baseuser.py:196 +#: ipaserver/plugins/user.py:160 msgid "Users" msgstr "" -#: ipaserver/plugins/sudorule.py:286 ipaserver/plugins/caacl.py:224 -#: ipaserver/plugins/group.py:327 ipaserver/plugins/selinuxusermap.py:276 -#: ipaserver/plugins/internal.py:878 ipaserver/plugins/internal.py:1188 -#: ipaserver/plugins/hbacrule.py:264 +#: ipaserver/plugins/group.py:327 ipaserver/plugins/sudorule.py:286 +#: ipaserver/plugins/selinuxusermap.py:276 ipaserver/plugins/internal.py:878 +#: ipaserver/plugins/internal.py:1188 ipaserver/plugins/hbacrule.py:264 msgid "User Groups" msgstr "" -#: ipaserver/plugins/sudorule.py:295 ipaserver/plugins/caacl.py:228 -#: ipaserver/plugins/host.py:456 ipaserver/plugins/selinuxusermap.py:280 +#: ipaserver/plugins/sudorule.py:295 ipaserver/plugins/selinuxusermap.py:280 #: ipaserver/plugins/automember.py:702 ipaserver/plugins/internal.py:1163 -#: ipaserver/plugins/hbacrule.py:268 +#: ipaserver/plugins/host.py:456 ipaserver/plugins/hbacrule.py:268 msgid "Hosts" msgstr "" -#: ipaserver/plugins/sudorule.py:299 ipaserver/plugins/caacl.py:232 -#: ipaserver/plugins/hostgroup.py:178 ipaserver/plugins/selinuxusermap.py:284 -#: ipaserver/plugins/internal.py:1072 ipaserver/plugins/internal.py:1162 -#: ipaserver/plugins/hbacrule.py:272 +#: ipaserver/plugins/hostgroup.py:178 ipaserver/plugins/sudorule.py:299 +#: ipaserver/plugins/selinuxusermap.py:284 ipaserver/plugins/internal.py:1072 +#: ipaserver/plugins/internal.py:1162 ipaserver/plugins/hbacrule.py:272 msgid "Host Groups" msgstr "" @@ -3531,9 +3527,9 @@ msgstr "" msgid "host groups to add" msgstr "" -#: ipaserver/plugins/baseldap.py:1758 ipaserver/plugins/baseldap.py:2245 -#: ipaserver/plugins/role.py:231 ipaserver/plugins/role.py:255 -#: ipaserver/plugins/privilege.py:226 ipaserver/plugins/privilege.py:257 +#: ipaserver/plugins/role.py:255 ipaserver/plugins/privilege.py:226 +#: ipaserver/plugins/privilege.py:257 ipaserver/plugins/baseldap.py:1758 +#: ipaserver/plugins/baseldap.py:2245 msgid "Members that could not be added" msgstr "" @@ -3863,9 +3859,9 @@ msgstr "" msgid "Random password" msgstr "" -#: ipaserver/plugins/cert.py:353 ipaserver/plugins/idviews.py:1055 -#: ipaserver/plugins/certmap.py:605 ipaserver/plugins/ca.py:112 +#: ipaserver/plugins/idviews.py:1055 ipaserver/plugins/ca.py:112 #: ipaserver/plugins/internal.py:638 ipaserver/plugins/internal.py:722 +#: ipaserver/plugins/host.py:508 ipaserver/plugins/certmap.py:605 #: ipaserver/plugins/service.py:492 ipaserver/plugins/baseuser.py:398 #: ipaserver/plugins/baseuser.py:838 msgid "Certificate" @@ -3884,7 +3880,7 @@ msgstr "" msgid "Hardware MAC address(es) on this host" msgstr "" -#: ipaserver/plugins/idviews.py:1049 ipaserver/plugins/baseuser.py:348 +#: ipaserver/plugins/host.py:571 ipaserver/plugins/baseuser.py:348 msgid "SSH public key" msgstr "" @@ -3897,7 +3893,7 @@ msgid "" "interpretation)" msgstr "" -#: ipaserver/plugins/internal.py:1120 +#: ipaserver/plugins/internal.py:1120 ipaserver/plugins/host.py:586 msgid "Assigned ID View" msgstr "" @@ -3921,7 +3917,7 @@ msgstr "" msgid "Member of host-groups" msgstr "" -#: ipaserver/plugins/role.py:142 +#: ipaserver/plugins/baseldap.py:80 msgid "Roles" msgstr "" @@ -4096,8 +4092,8 @@ msgstr "" msgid "Search for hosts without these enrolled by users." msgstr "" -#: ipaserver/plugins/sudorule.py:439 ipaserver/plugins/host.py:279 -#: ipaserver/plugins/cert.py:1028 +#: ipaserver/plugins/sudorule.py:439 ipaserver/plugins/cert.py:1028 +#: ipaserver/plugins/host.py:279 msgid "host" msgstr "" @@ -4372,8 +4368,8 @@ msgid "" "hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" -#: ipaserver/plugins/sudorule.py:439 ipaserver/plugins/host.py:280 -#: ipaserver/plugins/idviews.py:453 ipaserver/plugins/idviews.py:496 +#: ipaserver/plugins/sudorule.py:439 ipaserver/plugins/idviews.py:453 +#: ipaserver/plugins/idviews.py:496 ipaserver/plugins/host.py:280 msgid "hosts" msgstr "" @@ -5807,9 +5803,9 @@ msgid "" " ipa realmdomains-mod --del-domain=olddomain.com\n" msgstr "" -#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/certmap.py:566 -#: ipaserver/plugins/internal.py:714 ipaserver/plugins/internal.py:1519 -#: ipaserver/plugins/trust.py:1245 +#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/internal.py:714 +#: ipaserver/plugins/internal.py:1519 ipaserver/plugins/trust.py:1245 +#: ipaserver/plugins/certmap.py:566 msgid "Domain" msgstr "" @@ -8231,7 +8227,7 @@ msgstr "" msgid "Fallback primary group" msgstr "" -#: ipaserver/plugins/certmap.py:298 ipaserver/plugins/trust.py:1580 +#: ipaserver/plugins/certmap.py:298 msgid "Domain name" msgstr "" @@ -9021,13 +9017,13 @@ msgstr "" msgid "Display Sudo Rule." msgstr "" -#: ipaserver/plugins/pkinit.py:72 ipaserver/plugins/cert.py:1569 -#: ipaserver/plugins/serverrole.py:124 ipaserver/plugins/baseldap.py:1968 +#: ipaserver/plugins/pkinit.py:72 ipaserver/plugins/serverrole.py:124 +#: ipaserver/plugins/cert.py:1569 ipaserver/plugins/baseldap.py:1968 msgid "Time limit of search in seconds (0 is unlimited)" msgstr "" -#: ipaserver/plugins/pkinit.py:80 ipaserver/plugins/cert.py:1574 -#: ipaserver/plugins/serverrole.py:132 ipaserver/plugins/baseldap.py:1975 +#: ipaserver/plugins/pkinit.py:80 ipaserver/plugins/serverrole.py:132 +#: ipaserver/plugins/cert.py:1574 ipaserver/plugins/baseldap.py:1975 msgid "Maximum number of entries returned (0 is unlimited)" msgstr "" @@ -10008,7 +10004,7 @@ msgstr "" msgid "Principal for this certificate (e.g. HTTP/test.example.com)" msgstr "" -#: ipaserver/plugins/cert.py:578 ipaserver/plugins/certprofile.py:122 +#: ipaserver/plugins/certprofile.py:122 ipaserver/plugins/cert.py:578 msgid "Profile ID" msgstr "" @@ -12776,6 +12772,85 @@ msgid_plural "%(count)d plugins loaded" msgstr[0] "" msgstr[1] "" +#: ipalib/cli.py:630 +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +#: ipalib/cli.py:639 +msgid "Passwords do not match!" +msgstr "" + +#: ipalib/cli.py:662 +msgid "No matching entries found" +msgstr "" + +#: ipalib/cli.py:737 +msgid "Topic or Command" +msgstr "" + +#: ipalib/cli.py:738 +msgid "The topic or command name." +msgstr "" + +#: ipalib/cli.py:910 +msgid "Topic commands:" +msgstr "" + +#: ipalib/cli.py:916 +msgid "To get command help, use:" +msgstr "" + +#: ipalib/cli.py:917 +msgid " ipa --help" +msgstr "" + +#: ipalib/cli.py:928 +msgid "Command name" +msgstr "" + +#: ipalib/cli.py:1151 +msgid "Positional arguments" +msgstr "" + +#: ipalib/cli.py:1297 +#, python-format +msgid "Same as --%s" +msgstr "" + +#: ipalib/cli.py:1300 +msgid "Deprecated options" +msgstr "" + +#: ipalib/cli.py:1431 +msgid "No file to read" +msgstr "" + +#: ipalib/output.py:110 +msgid "A dictionary representing an LDAP entry" +msgstr "" + +#: ipalib/output.py:118 +msgid "A list of LDAP entries" +msgstr "" + +#: ipalib/output.py:170 +msgid "All commands should at least have a result" +msgstr "" + +#: ipalib/frontend.py:425 +msgid "Results are truncated, try a more specific search" +msgstr "" + +#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +#: ipalib/frontend.py:986 ipaserver/plugins/batch.py:83 +msgid "Client version. Used to determine if server will accept request." +msgstr "" + #: ipalib/errors.py:296 #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" @@ -13229,103 +13304,6 @@ msgid "" "prevents a trust to '%(conflict)s'" msgstr "" -#: ipalib/rpc.py:1110 -msgid "any of the configured servers" -msgstr "" - -#: ipalib/rpc.py:1193 -msgid "Exceeded number of tries to forward a request." -msgstr "" - -#: ipalib/cli.py:630 -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -#: ipalib/cli.py:639 -msgid "Passwords do not match!" -msgstr "" - -#: ipalib/cli.py:662 -msgid "No matching entries found" -msgstr "" - -#: ipalib/cli.py:737 -msgid "Topic or Command" -msgstr "" - -#: ipalib/cli.py:738 -msgid "The topic or command name." -msgstr "" - -#: ipalib/cli.py:910 -msgid "Topic commands:" -msgstr "" - -#: ipalib/cli.py:916 -msgid "To get command help, use:" -msgstr "" - -#: ipalib/cli.py:917 -msgid " ipa --help" -msgstr "" - -#: ipalib/cli.py:928 -msgid "Command name" -msgstr "" - -#: ipalib/cli.py:1151 -msgid "Positional arguments" -msgstr "" - -#: ipalib/cli.py:1297 -#, python-format -msgid "Same as --%s" -msgstr "" - -#: ipalib/cli.py:1300 -msgid "Deprecated options" -msgstr "" - -#: ipalib/cli.py:1431 -msgid "No file to read" -msgstr "" - -#: ipalib/plugable.py:540 -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#: ipalib/plugable.py:613 -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -#: ipalib/output.py:110 -msgid "A dictionary representing an LDAP entry" -msgstr "" - -#: ipalib/output.py:118 -msgid "A list of LDAP entries" -msgstr "" - -#: ipalib/output.py:170 -msgid "All commands should at least have a result" -msgstr "" - -#: ipalib/frontend.py:425 -msgid "Results are truncated, try a more specific search" -msgstr "" - -#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -#: ipalib/frontend.py:986 ipaserver/plugins/batch.py:83 -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #: ipalib/parameters.py:408 msgid "incorrect type" msgstr "" @@ -13493,6 +13471,24 @@ msgstr "" msgid "Service principal is required" msgstr "" +#: ipalib/plugable.py:540 +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#: ipalib/plugable.py:613 +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#: ipalib/rpc.py:1110 +msgid "any of the configured servers" +msgstr "" + +#: ipalib/rpc.py:1193 +msgid "Exceeded number of tries to forward a request." +msgstr "" + #: ipalib/util.py:213 msgid "Filename is empty" msgstr "" @@ -13620,11 +13616,6 @@ msgstr "" msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" -#: ipapython/ipaldap.py:1187 -#, python-format -msgid "objectclass %s not found" -msgstr "" - #: ipapython/dogtag.py:109 #, python-format msgid "Retrieving CA cert chain failed: %s" @@ -13645,20 +13636,25 @@ msgstr "" msgid "Retrieving CA status failed with status %d" msgstr "" +#: ipapython/ipaldap.py:1187 +#, python-format +msgid "objectclass %s not found" +msgstr "" + #: ipaserver/install/certs.py:480 #, python-format msgid "Unable to communicate with CMS (status %d)" msgstr "" -#: ipaserver/install/ipa_acme_manage.py:45 ipaserver/plugins/dogtag.py:1203 -msgid "Failed to authenticate to CA REST API" -msgstr "" - #: ipaserver/install/replication.py:1779 ipaserver/install/replication.py:1798 #, python-format msgid "Replication agreement for %(hostname)s not found" msgstr "" +#: ipaserver/install/ipa_acme_manage.py:45 ipaserver/plugins/dogtag.py:1203 +msgid "Failed to authenticate to CA REST API" +msgstr "" + #: ipaserver/plugins/automount.py:218 msgid "automount location" msgstr "" @@ -13805,219 +13801,128 @@ msgid_plural "%(count)d automount keys matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/sudorule.py:43 +#: ipaserver/plugins/certprofile.py:21 msgid "" "\n" -"Sudo Rules\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:45 -msgid "" +"Manage Certificate Profiles\n" "\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:50 -msgid "" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" "\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:59 -msgid "" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" "\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:63 -msgid "" +"PROFILE ID SYNTAX:\n" "\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:66 -msgid "" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" "\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:73 -msgid "" +"EXAMPLES:\n" "\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:76 -msgid "" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" "\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:80 -msgid "" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" "\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:83 -msgid "" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" "\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:86 -msgid "" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" "\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:89 -msgid "" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" "\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:92 -msgid "" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" "\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" msgstr "" -#: ipaserver/plugins/sudorule.py:111 -msgid "this option has been deprecated." +#: ipaserver/plugins/certprofile.py:86 ipaserver/plugins/cert.py:283 +msgid "CA is not configured" msgstr "" -#: ipaserver/plugins/sudorule.py:139 -msgid "sudo rules" +#: ipaserver/plugins/certprofile.py:95 +msgid "invalid Profile ID" msgstr "" -#: ipaserver/plugins/sudorule.py:227 -msgid "Sudo Rules" +#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 +msgid "Certificate Profile" msgstr "" -#: ipaserver/plugins/sudorule.py:228 -msgid "Sudo Rule" +#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 +msgid "Certificate Profiles" msgstr "" -#: ipaserver/plugins/sudorule.py:363 +#: ipaserver/plugins/certprofile.py:126 +msgid "Profile configuration" +msgstr "" + +#: ipaserver/plugins/certprofile.py:190 #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#: ipaserver/plugins/sudorule.py:394 -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudorule.py:401 -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudorule.py:408 -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudorule.py:428 -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#: ipaserver/plugins/sudorule.py:434 ipaserver/plugins/user.py:163 -msgid "users" -msgstr "" - -#: ipaserver/plugins/sudorule.py:444 -msgid "command" -msgstr "" - -#: ipaserver/plugins/sudorule.py:444 -msgid "commands" -msgstr "" - -#: ipaserver/plugins/sudorule.py:450 -msgid "runAs user" -msgstr "" - -#: ipaserver/plugins/sudorule.py:450 -msgid "runAs users" -msgstr "" - -#: ipaserver/plugins/sudorule.py:455 -msgid "group runAs" -msgstr "" - -#: ipaserver/plugins/sudorule.py:455 -msgid "runAs groups" -msgstr "" - -#: ipaserver/plugins/sudorule.py:476 -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/sudorule.py:548 -msgid "commands cannot be added when command category='all'" -msgstr "" - -#: ipaserver/plugins/sudorule.py:599 ipaserver/plugins/caacl.py:397 -#: ipaserver/plugins/selinuxusermap.py:564 ipaserver/plugins/hbacrule.py:518 -msgid "users cannot be added when user category='all'" -msgstr "" - -#: ipaserver/plugins/sudorule.py:702 ipaserver/plugins/caacl.py:429 -#: ipaserver/plugins/selinuxusermap.py:597 ipaserver/plugins/hbacrule.py:549 -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#: ipaserver/plugins/sudorule.py:810 ipaserver/plugins/sudorule.py:932 -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#: ipaserver/plugins/sudorule.py:817 +#: ipaserver/plugins/certprofile.py:222 #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" +msgid "Imported profile \"%(value)s\"" msgstr "" -#: ipaserver/plugins/sudorule.py:825 +#: ipaserver/plugins/certprofile.py:247 #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" +msgid "Profile data specifies profileId multiple times: %(values)s" msgstr "" -#: ipaserver/plugins/sudorule.py:939 +#: ipaserver/plugins/certprofile.py:255 #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#: ipaserver/plugins/certprofile.py:282 +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:289 +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#: ipaserver/plugins/certprofile.py:305 +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certprofile.py:322 +msgid "Certificate profiles cannot be renamed" +msgstr "" + +#: ipaserver/plugins/certprofile.py:327 +msgid "Insufficient privilege to modify a certificate profile." msgstr "" #: ipaserver/plugins/caacl.py:21 @@ -14171,6 +14076,11 @@ msgstr "" msgid "%i users or groups added." msgstr "" +#: ipaserver/plugins/caacl.py:397 ipaserver/plugins/sudorule.py:599 +#: ipaserver/plugins/selinuxusermap.py:564 ipaserver/plugins/hbacrule.py:518 +msgid "users cannot be added when user category='all'" +msgstr "" + #: ipaserver/plugins/caacl.py:407 #, python-format msgid "%i user or group removed." @@ -14191,6 +14101,11 @@ msgstr "" msgid "%i hosts or hostgroups added." msgstr "" +#: ipaserver/plugins/caacl.py:429 ipaserver/plugins/sudorule.py:702 +#: ipaserver/plugins/selinuxusermap.py:597 ipaserver/plugins/hbacrule.py:549 +msgid "hosts cannot be added when host category='all'" +msgstr "" + #: ipaserver/plugins/caacl.py:439 #, python-format msgid "%i host or hostgroup removed." @@ -14301,99 +14216,922 @@ msgstr "" msgid "Domain Level cannot be raised to {0}, server {1} does not support it." msgstr "" -#: ipaserver/plugins/otptoken.py:42 +#: ipaserver/plugins/dns.py:100 msgid "" "\n" -"OTP Tokens\n" +"Domain Name System (DNS)\n" msgstr "" -#: ipaserver/plugins/otptoken.py:44 +#: ipaserver/plugins/dns.py:102 msgid "" "\n" -"Manage OTP tokens.\n" +"Manage DNS zone and resource records.\n" msgstr "" -#: ipaserver/plugins/otptoken.py:46 +#: ipaserver/plugins/dns.py:104 msgid "" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" msgstr "" -#: ipaserver/plugins/otptoken.py:51 +#: ipaserver/plugins/dns.py:110 msgid "" "\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" msgstr "" -#: ipaserver/plugins/otptoken.py:54 +#: ipaserver/plugins/dns.py:112 msgid "" "\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" msgstr "" -#: ipaserver/plugins/otptoken.py:57 +#: ipaserver/plugins/dns.py:118 msgid "" "\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" msgstr "" -#: ipaserver/plugins/otptoken.py:60 +#: ipaserver/plugins/dns.py:126 msgid "" "\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" msgstr "" -#: ipaserver/plugins/otptoken.py:137 -msgid "OTP token" +#: ipaserver/plugins/dns.py:135 +msgid "" +"\n" +"\n" +"EXAMPLES:\n" msgstr "" -#: ipaserver/plugins/otptoken.py:138 -msgid "OTP tokens" +#: ipaserver/plugins/dns.py:138 +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" msgstr "" -#: ipaserver/plugins/otptoken.py:154 -msgid "OTP Tokens" +#: ipaserver/plugins/dns.py:141 +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" msgstr "" -#: ipaserver/plugins/otptoken.py:155 -msgid "OTP Token" +#: ipaserver/plugins/dns.py:144 +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" msgstr "" -#: ipaserver/plugins/otptoken.py:272 -msgid "URI" +#: ipaserver/plugins/dns.py:147 +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" msgstr "" -#: ipaserver/plugins/otptoken.py:281 +#: ipaserver/plugins/dns.py:151 +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +#: ipaserver/plugins/dns.py:154 +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +#: ipaserver/plugins/dns.py:157 +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:160 +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +#: ipaserver/plugins/dns.py:163 +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +#: ipaserver/plugins/dns.py:166 +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:179 +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:182 +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +#: ipaserver/plugins/dns.py:185 +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +#: ipaserver/plugins/dns.py:190 +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:193 +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +#: ipaserver/plugins/dns.py:200 +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:217 +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:220 +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +#: ipaserver/plugins/dns.py:233 +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:236 +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +#: ipaserver/plugins/dns.py:239 +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +#: ipaserver/plugins/dns.py:242 +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +#: ipaserver/plugins/dns.py:245 +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +#: ipaserver/plugins/dns.py:248 +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:252 +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:255 +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:259 +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:270 +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +#: ipaserver/plugins/dns.py:277 +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +#: ipaserver/plugins/dns.py:280 +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +#: ipaserver/plugins/dns.py:284 +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +#: ipaserver/plugins/dns.py:290 +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +#: ipaserver/plugins/dns.py:293 +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:296 +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +#: ipaserver/plugins/dns.py:299 +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +#: ipaserver/plugins/dns.py:302 +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +#: ipaserver/plugins/dns.py:307 +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +#: ipaserver/plugins/dns.py:310 +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +#: ipaserver/plugins/dns.py:315 +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +#: ipaserver/plugins/dns.py:318 +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +#: ipaserver/plugins/dns.py:406 +msgid "invalid IP network format" +msgstr "" + +#: ipaserver/plugins/dns.py:415 +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +#: ipaserver/plugins/dns.py:431 +msgid "invalid address format" +msgstr "" + +#: ipaserver/plugins/dns.py:475 +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +#: ipaserver/plugins/dns.py:484 +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +#: ipaserver/plugins/dns.py:487 +msgid "flags value: allowed interval 0-255" +msgstr "" + +#: ipaserver/plugins/dns.py:490 +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#: ipaserver/plugins/dns.py:498 #, python-format -msgid "Added OTP token \"%(value)s\"" +msgid "salt value: %(err)s" msgstr "" -#: ipaserver/plugins/otptoken.py:335 -msgid "cannot be empty" +#: ipaserver/plugins/dns.py:505 +msgid "invalid domain-name: not fully qualified" msgstr "" -#: ipaserver/plugins/otptoken.py:367 +#: ipaserver/plugins/dns.py:514 +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#: ipaserver/plugins/dns.py:555 #, python-format -msgid "Deleted OTP token \"%(value)s\"" +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" msgstr "" -#: ipaserver/plugins/otptoken.py:373 +#: ipaserver/plugins/dns.py:564 #, python-format -msgid "Modified OTP token \"%(value)s\"" +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" msgstr "" -#: ipaserver/plugins/otptoken.py:422 +#: ipaserver/plugins/dns.py:581 #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" +msgid "DNS zone %(zone)s not found" +msgstr "" + +#: ipaserver/plugins/dns.py:596 +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#: ipaserver/plugins/dns.py:606 +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#: ipaserver/plugins/dns.py:681 +#, python-format +msgid "%s record" +msgstr "" + +#: ipaserver/plugins/dns.py:683 +#, python-format +msgid "Raw %s records" +msgstr "" + +#: ipaserver/plugins/dns.py:684 +#, python-format +msgid "%s Record" +msgstr "" + +#: ipaserver/plugins/dns.py:685 +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#: ipaserver/plugins/dns.py:747 +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +#: ipaserver/plugins/dns.py:754 +msgid "Invalid number of parts!" +msgstr "" + +#: ipaserver/plugins/dns.py:806 +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#: ipaserver/plugins/dns.py:822 +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +#: ipaserver/plugins/dns.py:897 +msgid "Create reverse" +msgstr "" + +#: ipaserver/plugins/dns.py:933 +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +#: ipaserver/plugins/dns.py:1108 ipaserver/plugins/dns.py:1265 +msgid "Exchanger" +msgstr "" + +#: ipaserver/plugins/dns.py:1183 +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#: ipaserver/plugins/dns.py:1237 +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +#: ipaserver/plugins/dns.py:1292 +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#: ipaserver/plugins/dns.py:1353 ipaserver/plugins/dns.py:1483 +msgid "Priority (order)" +msgstr "" + +#: ipaserver/plugins/dns.py:1354 +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +#: ipaserver/plugins/dns.py:1362 ipaserver/plugins/dns.py:1492 +msgid "Relative weight for entries with the same priority." +msgstr "" + +#: ipaserver/plugins/dns.py:1382 +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +#: ipaserver/plugins/dns.py:1484 +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +#: ipaserver/plugins/dns.py:1497 +msgid "Target Uniform Resource Identifier" +msgstr "" + +#: ipaserver/plugins/dns.py:1498 +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#: ipaserver/plugins/dns.py:1580 +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +#: ipaserver/plugins/dns.py:2049 +msgid "Managedby permission" +msgstr "" + +#: ipaserver/plugins/dns.py:2056 ipaserver/plugins/dns.py:2230 +#: ipaserver/plugins/dns.py:3182 ipaserver/plugins/dns.py:4163 +#: ipaserver/plugins/dnsserver.py:148 +msgid "DNS is not configured" +msgstr "" + +#: ipaserver/plugins/dns.py:2150 +msgid "cannot be used when a zone is specified" +msgstr "" + +#: ipaserver/plugins/dns.py:2162 +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#: ipaserver/plugins/dns.py:2305 +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:2335 +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#: ipaserver/plugins/dns.py:2363 +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:2399 +msgid "DNS zone" +msgstr "" + +#: ipaserver/plugins/dns.py:2400 +msgid "DNS zones" +msgstr "" + +#: ipaserver/plugins/dns.py:2408 +msgid "DNS Zones" +msgstr "" + +#: ipaserver/plugins/dns.py:2409 +msgid "DNS Zone" +msgstr "" + +#: ipaserver/plugins/dns.py:2481 +msgid "Default time to live" +msgstr "" + +#: ipaserver/plugins/dns.py:2482 +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +#: ipaserver/plugins/dns.py:2697 +msgid "setting Authoritative nameserver" +msgstr "" + +#: ipaserver/plugins/dns.py:2698 +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +#: ipaserver/plugins/dns.py:2700 +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +#: ipaserver/plugins/dns.py:2735 +msgid "" +msgstr "" + +#: ipaserver/plugins/dns.py:2791 +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#: ipaserver/plugins/dns.py:2846 +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:2899 +msgid "is required" +msgstr "" + +#: ipaserver/plugins/dns.py:2980 +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:2991 +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:3016 +msgid "DNS resource record" +msgstr "" + +#: ipaserver/plugins/dns.py:3017 +msgid "DNS resource records" +msgstr "" + +#: ipaserver/plugins/dns.py:3024 +msgid "DNS Resource Records" +msgstr "" + +#: ipaserver/plugins/dns.py:3025 +msgid "DNS Resource Record" +msgstr "" + +#: ipaserver/plugins/dns.py:3060 +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3077 +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#: ipaserver/plugins/dns.py:3088 +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3133 +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +#: ipaserver/plugins/dns.py:3175 +msgid "only master zones can contain records" +msgstr "" + +#: ipaserver/plugins/dns.py:3273 +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +#: ipaserver/plugins/dns.py:3279 +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +#: ipaserver/plugins/dns.py:3287 +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3303 +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +#: ipaserver/plugins/dns.py:3319 +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#: ipaserver/plugins/dns.py:3600 +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +#: ipaserver/plugins/dns.py:3726 +msgid "DNS zone root record cannot be renamed" +msgstr "" + +#: ipaserver/plugins/dns.py:3744 +msgid "DNS records can be only updated one at a time" +msgstr "" + +#: ipaserver/plugins/dns.py:3837 +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:3930 +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#: ipaserver/plugins/dns.py:4032 +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#: ipaserver/plugins/dns.py:4047 +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +#: ipaserver/plugins/dns.py:4078 +msgid "DNS configuration options" +msgstr "" + +#: ipaserver/plugins/dns.py:4083 ipaserver/plugins/dns.py:4084 +msgid "DNS Global Configuration" +msgstr "" + +#: ipaserver/plugins/dns.py:4115 +msgid "IPA DNS version" +msgstr "" + +#: ipaserver/plugins/dns.py:4119 ipaserver/plugins/config.py:321 +msgid "IPA DNS servers" +msgstr "" + +#: ipaserver/plugins/dns.py:4120 +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +#: ipaserver/plugins/dns.py:4125 ipaserver/plugins/config.py:333 +msgid "IPA DNSSec key master" +msgstr "" + +#: ipaserver/plugins/dns.py:4126 +msgid "IPA server configured as DNSSec key master" +msgstr "" + +#: ipaserver/plugins/dns.py:4177 +msgid "Global DNS configuration is empty" +msgstr "" + +#: ipaserver/plugins/dns.py:4258 +msgid "DNS forward zone" +msgstr "" + +#: ipaserver/plugins/dns.py:4259 +msgid "DNS forward zones" +msgstr "" + +#: ipaserver/plugins/dns.py:4261 +msgid "DNS Forward Zones" +msgstr "" + +#: ipaserver/plugins/dns.py:4262 +msgid "DNS Forward Zone" +msgstr "" + +#: ipaserver/plugins/dns.py:4369 ipaserver/plugins/dns.py:4419 +msgid "Please specify forwarders." +msgstr "" + +#: ipaserver/plugins/dns.py:4388 +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:4445 +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:4451 +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/dns.py:4474 +msgid "IPA DNS records" +msgstr "" + +#: ipaserver/plugins/dns.py:4478 +msgid "IPA location records" +msgstr "" + +#: ipaserver/plugins/dns.py:4485 +msgid "Update location and IPA server DNS records" +msgstr "" + +#: ipaserver/plugins/dns.py:4496 +msgid "Result of the command" +msgstr "" + +#: ipaserver/plugins/dns.py:4503 +msgid "Dry run" +msgstr "" + +#: ipaserver/plugins/dns.py:4504 +msgid "Do not update records only return expected records" +msgstr "" #: ipaserver/plugins/dnsserver.py:35 msgid "" @@ -14466,12 +15204,6 @@ msgid "" "forwarders are disregarded." msgstr "" -#: ipaserver/plugins/dnsserver.py:148 ipaserver/plugins/dns.py:2056 -#: ipaserver/plugins/dns.py:2230 ipaserver/plugins/dns.py:3182 -#: ipaserver/plugins/dns.py:4163 -msgid "DNS is not configured" -msgstr "" - #: ipaserver/plugins/dnsserver.py:154 msgid "Modify DNS server configuration" msgstr "" @@ -14518,6 +15250,24 @@ msgstr "" msgid "Deleted DNS server \"%(value)s\"" msgstr "" +#: ipaserver/plugins/dogtag.py:1243 +msgid "REST API is not logged in." +msgstr "" + +#: ipaserver/plugins/dogtag.py:1265 +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1291 +msgid "Unable to communicate with CMS" +msgstr "" + +#: ipaserver/plugins/dogtag.py:1481 ipaserver/plugins/dogtag.py:1567 +#: ipaserver/plugins/dogtag.py:2073 ipaserver/plugins/dogtag.py:2083 +msgid "Response from CA was not valid JSON" +msgstr "" + #: ipaserver/plugins/hbac.py:7 msgid "Host-based access control commands" msgstr "" @@ -15048,262 +15798,11 @@ msgid "" " replication agreements\n" msgstr "" -#: ipaserver/plugins/host.py:74 -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -#: ipaserver/plugins/host.py:82 -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -#: ipaserver/plugins/host.py:94 -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -#: ipaserver/plugins/host.py:106 -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/host.py:109 -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:112 -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:115 -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:118 -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:121 -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:124 -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:127 -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -#: ipaserver/plugins/host.py:130 -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/host.py:457 ipaserver/plugins/internal.py:1161 -#: ipaserver/plugins/internal.py:1282 -msgid "Host" -msgstr "" - -#: ipaserver/plugins/host.py:509 -msgid "Base-64 encoded host certificate" -msgstr "" - -#: ipaserver/plugins/host.py:512 ipaserver/plugins/cert.py:365 -#: ipaserver/plugins/cert.py:1502 ipaserver/plugins/internal.py:653 -#: ipaserver/plugins/internal.py:729 ipaserver/plugins/service.py:497 -#: ipaserver/plugins/baseuser.py:831 -msgid "Subject" -msgstr "" - -#: ipaserver/plugins/host.py:516 ipaserver/plugins/internal.py:696 -#: ipaserver/plugins/service.py:501 -msgid "Serial Number" -msgstr "" - -#: ipaserver/plugins/host.py:520 ipaserver/plugins/internal.py:697 -#: ipaserver/plugins/service.py:505 -msgid "Serial Number (hex)" -msgstr "" - -#: ipaserver/plugins/host.py:524 ipaserver/plugins/cert.py:425 -#: ipaserver/plugins/internal.py:726 ipaserver/plugins/service.py:509 -#: ipaserver/plugins/baseuser.py:824 -msgid "Issuer" -msgstr "" - -#: ipaserver/plugins/host.py:528 ipaserver/plugins/cert.py:431 -#: ipaserver/plugins/service.py:513 -msgid "Not Before" -msgstr "" - -#: ipaserver/plugins/host.py:532 ipaserver/plugins/cert.py:436 -#: ipaserver/plugins/service.py:517 -msgid "Not After" -msgstr "" - -#: ipaserver/plugins/host.py:536 ipaserver/plugins/cert.py:441 -#: ipaserver/plugins/service.py:521 -msgid "Fingerprint (SHA1)" -msgstr "" - -#: ipaserver/plugins/host.py:540 ipaserver/plugins/cert.py:446 -#: ipaserver/plugins/service.py:525 -msgid "Fingerprint (SHA256)" -msgstr "" - -#: ipaserver/plugins/host.py:544 ipaserver/plugins/cert.py:1283 -#: ipaserver/plugins/internal.py:650 ipaserver/plugins/internal.py:691 -#: ipaserver/plugins/service.py:529 -msgid "Revocation reason" -msgstr "" - -#: ipaserver/plugins/host.py:557 ipaserver/plugins/service.py:484 -#: ipaserver/plugins/baseuser.py:257 -msgid "Principal alias" -msgstr "" - -#: ipaserver/plugins/host.py:576 ipaserver/plugins/baseuser.py:353 -msgid "SSH public key fingerprint" -msgstr "" - -#: ipaserver/plugins/host.py:592 ipaserver/plugins/service.py:543 -msgid "Authentication Indicators" -msgstr "" - -#: ipaserver/plugins/host.py:593 ipaserver/plugins/service.py:544 -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#: ipaserver/plugins/host.py:663 +#: ipaserver/plugins/join.py:125 #, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:785 -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:790 -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -#: ipaserver/plugins/host.py:869 -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#: ipaserver/plugins/host.py:885 -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:905 -msgid "Password cannot be set on enrolled host." -msgstr "" - -#: ipaserver/plugins/host.py:909 -msgid "cn is immutable" -msgstr "" - -#: ipaserver/plugins/host.py:1033 -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/host.py:1188 -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1363 -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1370 -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1386 -msgid "Add new principal alias to host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1387 -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1398 -msgid "Remove principal alias from a host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1399 -#, python-format -msgid "Removed aliases from host \"%(value)s\"" +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." msgstr "" #: ipaserver/plugins/hostgroup.py:35 @@ -16016,495 +16515,6 @@ msgid_plural "%(count)d RADIUS proxy servers matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/cert.py:64 ipaserver/plugins/hbactest.py:39 -msgid "pyhbac is not installed." -msgstr "" - -#: ipaserver/plugins/cert.py:69 -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -#: ipaserver/plugins/cert.py:71 -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:73 -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:76 -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:79 -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:82 -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:84 -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -#: ipaserver/plugins/cert.py:87 -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:89 -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:92 -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:95 -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:97 -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:101 -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#: ipaserver/plugins/cert.py:104 -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:107 -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:110 -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:113 -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -#: ipaserver/plugins/cert.py:116 -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -#: ipaserver/plugins/cert.py:119 -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -#: ipaserver/plugins/cert.py:122 -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -#: ipaserver/plugins/cert.py:125 -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:128 -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -#: ipaserver/plugins/cert.py:131 -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:134 -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:138 -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:141 -msgid " * 0 - unspecified\n" -msgstr "" - -#: ipaserver/plugins/cert.py:142 -msgid " * 1 - keyCompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:143 -msgid " * 2 - cACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:144 -msgid " * 3 - affiliationChanged\n" -msgstr "" - -#: ipaserver/plugins/cert.py:145 -msgid " * 4 - superseded\n" -msgstr "" - -#: ipaserver/plugins/cert.py:146 -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#: ipaserver/plugins/cert.py:147 -msgid " * 6 - certificateHold\n" -msgstr "" - -#: ipaserver/plugins/cert.py:148 -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#: ipaserver/plugins/cert.py:149 -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -#: ipaserver/plugins/cert.py:150 -msgid " * 10 - aACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:151 -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:153 -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:283 ipaserver/plugins/certprofile.py:86 -msgid "CA is not configured" -msgstr "" - -#: ipaserver/plugins/cert.py:289 -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -#: ipaserver/plugins/cert.py:309 -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#: ipaserver/plugins/cert.py:313 -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -#: ipaserver/plugins/cert.py:347 -msgid "Issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:348 -msgid "Name of issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:354 ipaserver/plugins/ca.py:113 -msgid "Base-64 encoded certificate." -msgstr "" - -#: ipaserver/plugins/cert.py:359 ipaserver/plugins/ca.py:118 -msgid "Certificate chain" -msgstr "" - -#: ipaserver/plugins/cert.py:360 ipaserver/plugins/ca.py:119 -msgid "X.509 certificate chain" -msgstr "" - -#: ipaserver/plugins/cert.py:370 -msgid "Subject email address" -msgstr "" - -#: ipaserver/plugins/cert.py:375 -msgid "Subject DNS name" -msgstr "" - -#: ipaserver/plugins/cert.py:380 -msgid "Subject X.400 address" -msgstr "" - -#: ipaserver/plugins/cert.py:385 -msgid "Subject directory name" -msgstr "" - -#: ipaserver/plugins/cert.py:390 -msgid "Subject EDI Party name" -msgstr "" - -#: ipaserver/plugins/cert.py:395 -msgid "Subject URI" -msgstr "" - -#: ipaserver/plugins/cert.py:400 -msgid "Subject IP Address" -msgstr "" - -#: ipaserver/plugins/cert.py:405 -msgid "Subject OID" -msgstr "" - -#: ipaserver/plugins/cert.py:410 -msgid "Subject UPN" -msgstr "" - -#: ipaserver/plugins/cert.py:415 -msgid "Subject Kerberos principal name" -msgstr "" - -#: ipaserver/plugins/cert.py:420 -msgid "Subject Other Name" -msgstr "" - -#: ipaserver/plugins/cert.py:426 ipaserver/plugins/ca.py:106 -msgid "Issuer DN" -msgstr "" - -#: ipaserver/plugins/cert.py:458 -msgid "Serial number (hex)" -msgstr "" - -#: ipaserver/plugins/cert.py:584 -msgid "Request status" -msgstr "" - -#: ipaserver/plugins/cert.py:599 ipaserver/plugins/ca.py:237 -msgid "Include certificate chain in output" -msgstr "" - -#: ipaserver/plugins/cert.py:630 -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#: ipaserver/plugins/cert.py:679 -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -#: ipaserver/plugins/cert.py:731 -msgid "No Common Name was found in subject of request." -msgstr "" - -#: ipaserver/plugins/cert.py:739 -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#: ipaserver/plugins/cert.py:745 -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -#: ipaserver/plugins/cert.py:754 -msgid "DN commonName does not match user's login" -msgstr "" - -#: ipaserver/plugins/cert.py:768 -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#: ipaserver/plugins/cert.py:777 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#: ipaserver/plugins/cert.py:798 ipaserver/plugins/cert.py:916 -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#: ipaserver/plugins/cert.py:843 -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#: ipaserver/plugins/cert.py:874 -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#: ipaserver/plugins/cert.py:892 -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -#: ipaserver/plugins/cert.py:901 -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#: ipaserver/plugins/cert.py:908 -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#: ipaserver/plugins/cert.py:925 -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#: ipaserver/plugins/cert.py:943 -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#: ipaserver/plugins/cert.py:1030 -msgid "'add' option" -msgstr "" - -#: ipaserver/plugins/cert.py:1034 -msgid "The principal for this request doesn't exist." -msgstr "" - -#: ipaserver/plugins/cert.py:1150 -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#: ipaserver/plugins/cert.py:1167 -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#: ipaserver/plugins/cert.py:1179 -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -#: ipaserver/plugins/cert.py:1273 ipaserver/plugins/internal.py:700 -#: ipaserver/plugins/internal.py:1030 ipaserver/plugins/internal.py:1332 -#: ipaserver/plugins/internal.py:1916 -msgid "Status" -msgstr "" - -#: ipaserver/plugins/cert.py:1278 -msgid "Revoked" -msgstr "" - -#: ipaserver/plugins/cert.py:1284 -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#: ipaserver/plugins/cert.py:1306 -#, python-format -msgid "Owner %s" -msgstr "" - -#: ipaserver/plugins/cert.py:1393 -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#: ipaserver/plugins/cert.py:1462 -msgid "7 is not a valid revocation reason" -msgstr "" - -#: ipaserver/plugins/cert.py:1564 -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#: ipaserver/plugins/cert.py:1580 -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/cert.py:1602 -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#: ipaserver/plugins/cert.py:1613 -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - #: ipaserver/plugins/aci.py:165 msgid "A list of ACI values" msgstr "" @@ -16599,6 +16609,215 @@ msgstr[1] "" msgid "Renamed ACI to \"%(value)s\"" msgstr "" +#: ipaserver/plugins/config.py:41 +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#: ipaserver/plugins/config.py:107 +msgid "must be at least 10" +msgstr "" + +#: ipaserver/plugins/config.py:115 +msgid "configuration options" +msgstr "" + +#: ipaserver/plugins/config.py:150 ipaserver/plugins/config.py:151 +msgid "Configuration" +msgstr "" + +#: ipaserver/plugins/config.py:162 +msgid "Maximum hostname length" +msgstr "" + +#: ipaserver/plugins/config.py:266 +msgid "IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:267 +msgid "List of all IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:272 +msgid "Hidden IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:273 +msgid "List of all hidden IPA masters" +msgstr "" + +#: ipaserver/plugins/config.py:278 +msgid "IPA master capable of PKINIT" +msgstr "" + +#: ipaserver/plugins/config.py:279 +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#: ipaserver/plugins/config.py:284 +msgid "IPA CA servers" +msgstr "" + +#: ipaserver/plugins/config.py:285 +msgid "IPA servers configured as certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:290 +msgid "Hidden IPA CA servers" +msgstr "" + +#: ipaserver/plugins/config.py:291 +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:296 +msgid "IPA CA renewal master" +msgstr "" + +#: ipaserver/plugins/config.py:297 +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#: ipaserver/plugins/config.py:303 +msgid "IPA servers configured as key recovery agent" +msgstr "" + +#: ipaserver/plugins/config.py:308 +msgid "Hidden IPA KRA servers" +msgstr "" + +#: ipaserver/plugins/config.py:309 +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +#: ipaserver/plugins/config.py:315 ipaserver/plugins/idviews.py:159 +msgid "Domain resolution order" +msgstr "" + +#: ipaserver/plugins/config.py:316 ipaserver/plugins/idviews.py:160 +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#: ipaserver/plugins/config.py:322 +msgid "IPA servers configured as domain name server" +msgstr "" + +#: ipaserver/plugins/config.py:327 +msgid "Hidden IPA DNS servers" +msgstr "" + +#: ipaserver/plugins/config.py:328 +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +#: ipaserver/plugins/config.py:334 +msgid "DNSec key master" +msgstr "" + +#: ipaserver/plugins/config.py:411 +msgid "Empty domain is not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:419 +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#: ipaserver/plugins/config.py:424 +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#: ipaserver/plugins/config.py:431 +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:483 +msgid "The group doesn't exist" +msgstr "" + +#: ipaserver/plugins/config.py:501 +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +#: ipaserver/plugins/config.py:521 +msgid "May not be empty" +msgstr "" + +#: ipaserver/plugins/config.py:540 +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +#: ipaserver/plugins/config.py:572 +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#: ipaserver/plugins/config.py:576 +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +#: ipaserver/plugins/config.py:588 +msgid "SELinux user map default user not in order list" +msgstr "" + #: ipaserver/plugins/group.py:62 msgid "" "\n" @@ -16789,240 +17008,6 @@ msgstr "" msgid "Remove users that can manage members of this group." msgstr "" -#: ipaserver/plugins/join.py:125 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1243 -msgid "REST API is not logged in." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1265 -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1291 -msgid "Unable to communicate with CMS" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1481 ipaserver/plugins/dogtag.py:1567 -#: ipaserver/plugins/dogtag.py:2073 ipaserver/plugins/dogtag.py:2083 -msgid "Response from CA was not valid JSON" -msgstr "" - -#: ipaserver/plugins/sudo.py:7 -msgid "commands for controlling sudo configuration" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:33 -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:58 -msgid "sudo command" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:59 -msgid "sudo commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:111 -msgid "Sudo Commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:148 -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:155 -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:188 -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:196 -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/sudocmdgroup.py:34 -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:67 -msgid "sudo command group" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:68 -msgid "sudo command groups" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:149 -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:157 -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:165 -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:174 -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/realmdomains.py:34 -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:85 -msgid "Realm domains" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:107 ipaserver/plugins/realmdomains.py:108 -#: ipaserver/plugins/internal.py:1259 -msgid "Realm Domains" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:134 -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#: ipaserver/plugins/realmdomains.py:177 -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:203 -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:218 -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:241 -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:252 -msgid "IPA server domain cannot be omitted" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:274 -msgid "IPA server domain cannot be deleted" -msgstr "" - #: ipaserver/plugins/permission.py:40 msgid "" "\n" @@ -17286,6 +17271,514 @@ msgid_plural "%(count)d permissions matched" msgstr[0] "" msgstr[1] "" +#: ipaserver/plugins/otptoken.py:42 +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:44 +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:46 +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:51 +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:54 +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:57 +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:60 +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#: ipaserver/plugins/otptoken.py:137 +msgid "OTP token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:138 +msgid "OTP tokens" +msgstr "" + +#: ipaserver/plugins/otptoken.py:154 +msgid "OTP Tokens" +msgstr "" + +#: ipaserver/plugins/otptoken.py:155 +msgid "OTP Token" +msgstr "" + +#: ipaserver/plugins/otptoken.py:272 +msgid "URI" +msgstr "" + +#: ipaserver/plugins/otptoken.py:281 +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:335 +msgid "cannot be empty" +msgstr "" + +#: ipaserver/plugins/otptoken.py:367 +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:373 +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/otptoken.py:422 +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/sudorule.py:43 +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:45 +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:50 +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:59 +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:63 +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:66 +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:73 +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:76 +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:80 +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:83 +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:86 +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:89 +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:92 +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#: ipaserver/plugins/sudorule.py:111 +msgid "this option has been deprecated." +msgstr "" + +#: ipaserver/plugins/sudorule.py:139 +msgid "sudo rules" +msgstr "" + +#: ipaserver/plugins/sudorule.py:227 +msgid "Sudo Rules" +msgstr "" + +#: ipaserver/plugins/sudorule.py:228 +msgid "Sudo Rule" +msgstr "" + +#: ipaserver/plugins/sudorule.py:363 +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#: ipaserver/plugins/sudorule.py:394 +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudorule.py:401 +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudorule.py:408 +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudorule.py:428 +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#: ipaserver/plugins/sudorule.py:434 ipaserver/plugins/user.py:163 +msgid "users" +msgstr "" + +#: ipaserver/plugins/sudorule.py:444 +msgid "command" +msgstr "" + +#: ipaserver/plugins/sudorule.py:444 +msgid "commands" +msgstr "" + +#: ipaserver/plugins/sudorule.py:450 +msgid "runAs user" +msgstr "" + +#: ipaserver/plugins/sudorule.py:450 +msgid "runAs users" +msgstr "" + +#: ipaserver/plugins/sudorule.py:455 +msgid "group runAs" +msgstr "" + +#: ipaserver/plugins/sudorule.py:455 +msgid "runAs groups" +msgstr "" + +#: ipaserver/plugins/sudorule.py:476 +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/sudorule.py:548 +msgid "commands cannot be added when command category='all'" +msgstr "" + +#: ipaserver/plugins/sudorule.py:810 ipaserver/plugins/sudorule.py:932 +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#: ipaserver/plugins/sudorule.py:817 +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#: ipaserver/plugins/sudorule.py:825 +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#: ipaserver/plugins/sudorule.py:939 +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +#: ipaserver/plugins/sudo.py:7 +msgid "commands for controlling sudo configuration" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:33 +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:58 +msgid "sudo command" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:59 +msgid "sudo commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:111 +msgid "Sudo Commands" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:148 +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:155 +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:188 +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmd.py:196 +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/sudocmdgroup.py:34 +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:67 +msgid "sudo command group" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:68 +msgid "sudo command groups" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:149 +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:157 +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:165 +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/sudocmdgroup.py:174 +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/realmdomains.py:34 +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:85 +msgid "Realm domains" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:107 ipaserver/plugins/realmdomains.py:108 +#: ipaserver/plugins/internal.py:1259 +msgid "Realm Domains" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:134 +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#: ipaserver/plugins/realmdomains.py:177 +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:203 +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:218 +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +#: ipaserver/plugins/realmdomains.py:241 +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +#: ipaserver/plugins/realmdomains.py:252 +msgid "IPA server domain cannot be omitted" +msgstr "" + +#: ipaserver/plugins/realmdomains.py:274 +msgid "IPA server domain cannot be deleted" +msgstr "" + #: ipaserver/plugins/whoami.py:15 msgid "" "\n" @@ -18324,6 +18817,530 @@ msgstr "" msgid "{attr}: no such attribute" msgstr "" +#: ipaserver/plugins/cert.py:64 ipaserver/plugins/hbactest.py:39 +msgid "pyhbac is not installed." +msgstr "" + +#: ipaserver/plugins/cert.py:69 +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +#: ipaserver/plugins/cert.py:71 +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:73 +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:76 +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:79 +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:82 +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:84 +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +#: ipaserver/plugins/cert.py:87 +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:89 +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:92 +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:95 +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:97 +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:101 +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#: ipaserver/plugins/cert.py:104 +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:107 +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:110 +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#: ipaserver/plugins/cert.py:113 +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +#: ipaserver/plugins/cert.py:116 +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +#: ipaserver/plugins/cert.py:119 +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +#: ipaserver/plugins/cert.py:122 +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +#: ipaserver/plugins/cert.py:125 +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +#: ipaserver/plugins/cert.py:128 +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +#: ipaserver/plugins/cert.py:131 +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +#: ipaserver/plugins/cert.py:134 +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +#: ipaserver/plugins/cert.py:138 +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#: ipaserver/plugins/cert.py:141 +msgid " * 0 - unspecified\n" +msgstr "" + +#: ipaserver/plugins/cert.py:142 +msgid " * 1 - keyCompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:143 +msgid " * 2 - cACompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:144 +msgid " * 3 - affiliationChanged\n" +msgstr "" + +#: ipaserver/plugins/cert.py:145 +msgid " * 4 - superseded\n" +msgstr "" + +#: ipaserver/plugins/cert.py:146 +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +#: ipaserver/plugins/cert.py:147 +msgid " * 6 - certificateHold\n" +msgstr "" + +#: ipaserver/plugins/cert.py:148 +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#: ipaserver/plugins/cert.py:149 +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +#: ipaserver/plugins/cert.py:150 +msgid " * 10 - aACompromise\n" +msgstr "" + +#: ipaserver/plugins/cert.py:151 +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +#: ipaserver/plugins/cert.py:153 +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#: ipaserver/plugins/cert.py:289 +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +#: ipaserver/plugins/cert.py:309 +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#: ipaserver/plugins/cert.py:313 +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +#: ipaserver/plugins/cert.py:347 +msgid "Issuing CA" +msgstr "" + +#: ipaserver/plugins/cert.py:348 +msgid "Name of issuing CA" +msgstr "" + +#: ipaserver/plugins/cert.py:354 ipaserver/plugins/ca.py:113 +msgid "Base-64 encoded certificate." +msgstr "" + +#: ipaserver/plugins/cert.py:359 ipaserver/plugins/ca.py:118 +msgid "Certificate chain" +msgstr "" + +#: ipaserver/plugins/cert.py:360 ipaserver/plugins/ca.py:119 +msgid "X.509 certificate chain" +msgstr "" + +#: ipaserver/plugins/cert.py:365 ipaserver/plugins/cert.py:1502 +#: ipaserver/plugins/internal.py:653 ipaserver/plugins/internal.py:729 +#: ipaserver/plugins/host.py:512 ipaserver/plugins/service.py:497 +#: ipaserver/plugins/baseuser.py:831 +msgid "Subject" +msgstr "" + +#: ipaserver/plugins/cert.py:370 +msgid "Subject email address" +msgstr "" + +#: ipaserver/plugins/cert.py:375 +msgid "Subject DNS name" +msgstr "" + +#: ipaserver/plugins/cert.py:380 +msgid "Subject X.400 address" +msgstr "" + +#: ipaserver/plugins/cert.py:385 +msgid "Subject directory name" +msgstr "" + +#: ipaserver/plugins/cert.py:390 +msgid "Subject EDI Party name" +msgstr "" + +#: ipaserver/plugins/cert.py:395 +msgid "Subject URI" +msgstr "" + +#: ipaserver/plugins/cert.py:400 +msgid "Subject IP Address" +msgstr "" + +#: ipaserver/plugins/cert.py:405 +msgid "Subject OID" +msgstr "" + +#: ipaserver/plugins/cert.py:410 +msgid "Subject UPN" +msgstr "" + +#: ipaserver/plugins/cert.py:415 +msgid "Subject Kerberos principal name" +msgstr "" + +#: ipaserver/plugins/cert.py:420 +msgid "Subject Other Name" +msgstr "" + +#: ipaserver/plugins/cert.py:425 ipaserver/plugins/internal.py:726 +#: ipaserver/plugins/host.py:524 ipaserver/plugins/service.py:509 +#: ipaserver/plugins/baseuser.py:824 +msgid "Issuer" +msgstr "" + +#: ipaserver/plugins/cert.py:426 ipaserver/plugins/ca.py:106 +msgid "Issuer DN" +msgstr "" + +#: ipaserver/plugins/cert.py:431 ipaserver/plugins/host.py:528 +#: ipaserver/plugins/service.py:513 +msgid "Not Before" +msgstr "" + +#: ipaserver/plugins/cert.py:436 ipaserver/plugins/host.py:532 +#: ipaserver/plugins/service.py:517 +msgid "Not After" +msgstr "" + +#: ipaserver/plugins/cert.py:441 ipaserver/plugins/host.py:536 +#: ipaserver/plugins/service.py:521 +msgid "Fingerprint (SHA1)" +msgstr "" + +#: ipaserver/plugins/cert.py:446 ipaserver/plugins/host.py:540 +#: ipaserver/plugins/service.py:525 +msgid "Fingerprint (SHA256)" +msgstr "" + +#: ipaserver/plugins/cert.py:458 +msgid "Serial number (hex)" +msgstr "" + +#: ipaserver/plugins/cert.py:584 +msgid "Request status" +msgstr "" + +#: ipaserver/plugins/cert.py:599 ipaserver/plugins/ca.py:237 +msgid "Include certificate chain in output" +msgstr "" + +#: ipaserver/plugins/cert.py:630 +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#: ipaserver/plugins/cert.py:679 +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +#: ipaserver/plugins/cert.py:731 +msgid "No Common Name was found in subject of request." +msgstr "" + +#: ipaserver/plugins/cert.py:739 +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#: ipaserver/plugins/cert.py:745 +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +#: ipaserver/plugins/cert.py:754 +msgid "DN commonName does not match user's login" +msgstr "" + +#: ipaserver/plugins/cert.py:768 +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#: ipaserver/plugins/cert.py:777 +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#: ipaserver/plugins/cert.py:798 ipaserver/plugins/cert.py:916 +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#: ipaserver/plugins/cert.py:843 +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#: ipaserver/plugins/cert.py:874 +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#: ipaserver/plugins/cert.py:892 +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +#: ipaserver/plugins/cert.py:901 +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#: ipaserver/plugins/cert.py:908 +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#: ipaserver/plugins/cert.py:925 +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#: ipaserver/plugins/cert.py:943 +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#: ipaserver/plugins/cert.py:1030 +msgid "'add' option" +msgstr "" + +#: ipaserver/plugins/cert.py:1034 +msgid "The principal for this request doesn't exist." +msgstr "" + +#: ipaserver/plugins/cert.py:1150 +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#: ipaserver/plugins/cert.py:1167 +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#: ipaserver/plugins/cert.py:1179 +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +#: ipaserver/plugins/cert.py:1273 ipaserver/plugins/internal.py:700 +#: ipaserver/plugins/internal.py:1030 ipaserver/plugins/internal.py:1332 +#: ipaserver/plugins/internal.py:1916 +msgid "Status" +msgstr "" + +#: ipaserver/plugins/cert.py:1278 +msgid "Revoked" +msgstr "" + +#: ipaserver/plugins/cert.py:1283 ipaserver/plugins/internal.py:650 +#: ipaserver/plugins/internal.py:691 ipaserver/plugins/host.py:544 +#: ipaserver/plugins/service.py:529 +msgid "Revocation reason" +msgstr "" + +#: ipaserver/plugins/cert.py:1284 +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#: ipaserver/plugins/cert.py:1306 +#, python-format +msgid "Owner %s" +msgstr "" + +#: ipaserver/plugins/cert.py:1393 +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#: ipaserver/plugins/cert.py:1462 +msgid "7 is not a valid revocation reason" +msgstr "" + +#: ipaserver/plugins/cert.py:1564 +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#: ipaserver/plugins/cert.py:1580 +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/cert.py:1602 +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#: ipaserver/plugins/cert.py:1613 +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + #: ipaserver/plugins/idviews.py:72 ipaserver/plugins/idviews.py:123 #: ipaserver/plugins/idviews.py:131 ipaserver/plugins/idviews.py:351 #: ipaserver/plugins/idviews.py:838 @@ -18350,14 +19367,6 @@ msgstr "" msgid "Hosts the view applies to" msgstr "" -#: ipaserver/plugins/idviews.py:159 ipaserver/plugins/config.py:315 -msgid "Domain resolution order" -msgstr "" - -#: ipaserver/plugins/idviews.py:160 ipaserver/plugins/config.py:316 -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - #: ipaserver/plugins/idviews.py:196 #, python-format msgid "Added ID View \"%(value)s\"" @@ -18579,270 +19588,6 @@ msgid_plural "%(count)d Group ID overrides matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/certmap.py:50 -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:52 -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:54 -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:62 -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:65 -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:68 -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:71 -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:74 -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:77 -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:80 -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:83 -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:86 -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:141 ipaserver/plugins/certmap.py:148 -#: ipaserver/plugins/certmap.py:175 ipaserver/plugins/trust.py:848 -msgid "domain" -msgstr "" - -#: ipaserver/plugins/certmap.py:142 -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -#: ipaserver/plugins/certmap.py:149 -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:176 -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#: ipaserver/plugins/certmap.py:186 -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -#: ipaserver/plugins/certmap.py:191 ipaserver/plugins/certmap.py:192 -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -#: ipaserver/plugins/certmap.py:198 -msgid "Prompt for the username" -msgstr "" - -#: ipaserver/plugins/certmap.py:199 -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#: ipaserver/plugins/certmap.py:229 -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -#: ipaserver/plugins/certmap.py:234 -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -#: ipaserver/plugins/certmap.py:243 ipaserver/plugins/certmap.py:247 -msgid "Certificate Identity Mapping Rules" -msgstr "" - -#: ipaserver/plugins/certmap.py:244 ipaserver/plugins/certmap.py:246 -msgid "Certificate Identity Mapping Rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:274 -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -#: ipaserver/plugins/certmap.py:280 -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -#: ipaserver/plugins/certmap.py:285 -msgid "Mapping rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:286 -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -#: ipaserver/plugins/certmap.py:291 -msgid "Matching rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:292 -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -#: ipaserver/plugins/certmap.py:299 -msgid "Domain where the user entry will be searched" -msgstr "" - -#: ipaserver/plugins/certmap.py:305 -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -#: ipaserver/plugins/certmap.py:356 -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:358 -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:369 -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:371 -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:392 -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#: ipaserver/plugins/certmap.py:395 -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certmap.py:402 -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:408 -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:410 -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:415 -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:417 -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:444 -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:446 -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:500 -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/certmap.py:554 -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/certmap.py:571 -msgid "User logins" -msgstr "" - -#: ipaserver/plugins/certmap.py:579 -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#: ipaserver/plugins/certmap.py:587 -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - #: ipaserver/plugins/automember.py:43 msgid "" "\n" @@ -19262,145 +20007,6 @@ msgstr "" msgid "Remove orphan automember rules" msgstr "" -#: ipaserver/plugins/baseldap.py:101 -msgid "Member service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:110 -msgid "Member HBAC service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:125 -msgid "Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:127 -msgid "Indirect Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:144 -msgid "Indirect Member permissions" -msgstr "" - -#: ipaserver/plugins/baseldap.py:147 -msgid "Indirect Member HBAC service" -msgstr "" - -#: ipaserver/plugins/baseldap.py:150 -msgid "Indirect Member HBAC service group" -msgstr "" - -#: ipaserver/plugins/baseldap.py:211 -msgid "Invalid format. Should be name=value" -msgstr "" - -#: ipaserver/plugins/baseldap.py:582 -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -#: ipaserver/plugins/baseldap.py:613 -msgid "entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:614 -msgid "entries" -msgstr "" - -#: ipaserver/plugins/baseldap.py:652 ipaserver/plugins/baseldap.py:653 -msgid "Entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:656 -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:657 -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:659 -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#: ipaserver/plugins/baseldap.py:946 ipaserver/plugins/baseldap.py:954 -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#: ipaserver/plugins/baseldap.py:959 -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1017 -msgid "attribute is not configurable" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1120 -msgid "No such attribute on this entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1476 -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1574 ipaserver/plugins/baseldap.py:2482 -msgid "the entry was deleted while being modified" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1707 ipaserver/plugins/baseldap.py:2209 -#, python-format -msgid "%s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1708 -#: ipaserver/plugins/servicedelegation.py:213 -#: ipaserver/plugins/servicedelegation.py:303 -#, python-format -msgid "member %s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1750 ipaserver/plugins/baseldap.py:2233 -#, python-format -msgid "%s to add" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1849 ipaserver/plugins/baseldap.py:2332 -#, python-format -msgid "%s to remove" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1957 -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1958 -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:2513 -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2527 -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2536 -msgid "one or more values to remove" -msgstr "" - #: ipaserver/plugins/ca.py:20 msgid "" "\n" @@ -20995,6 +21601,16 @@ msgstr "" msgid "REVOKED" msgstr "" +#: ipaserver/plugins/internal.py:696 ipaserver/plugins/host.py:516 +#: ipaserver/plugins/service.py:501 +msgid "Serial Number" +msgstr "" + +#: ipaserver/plugins/internal.py:697 ipaserver/plugins/host.py:520 +#: ipaserver/plugins/service.py:505 +msgid "Serial Number (hex)" +msgstr "" + #: ipaserver/plugins/internal.py:698 msgid "SHA1 Fingerprint" msgstr "" @@ -22005,6 +22621,11 @@ msgstr "" msgid "Add users into netgroup '${primary_key}'" msgstr "" +#: ipaserver/plugins/internal.py:1161 ipaserver/plugins/internal.py:1282 +#: ipaserver/plugins/host.py:457 +msgid "Host" +msgstr "" + #: ipaserver/plugins/internal.py:1164 msgid "Netgroup Settings" msgstr "" @@ -23878,6 +24499,13 @@ msgstr "" msgid "Add target to a named service delegation." msgstr "" +#: ipaserver/plugins/servicedelegation.py:213 +#: ipaserver/plugins/servicedelegation.py:303 +#: ipaserver/plugins/baseldap.py:1708 +#, python-format +msgid "member %s" +msgstr "" + #: ipaserver/plugins/servicedelegation.py:287 msgid "Remove member from a named service delegation." msgstr "" @@ -24121,1271 +24749,210 @@ msgstr "" msgid "Default group for new users not found" msgstr "" -#: ipaserver/plugins/certprofile.py:21 +#: ipaserver/plugins/host.py:74 msgid "" "\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +"Hosts/Machines\n" "\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" msgstr "" -#: ipaserver/plugins/certprofile.py:95 -msgid "invalid Profile ID" +#: ipaserver/plugins/host.py:82 +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" msgstr "" -#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 -msgid "Certificate Profile" +#: ipaserver/plugins/host.py:94 +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" msgstr "" -#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 -msgid "Certificate Profiles" +#: ipaserver/plugins/host.py:106 +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" msgstr "" -#: ipaserver/plugins/certprofile.py:126 -msgid "Profile configuration" +#: ipaserver/plugins/host.py:109 +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" msgstr "" -#: ipaserver/plugins/certprofile.py:190 +#: ipaserver/plugins/host.py:112 +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:115 +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:118 +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:121 +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:124 +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +#: ipaserver/plugins/host.py:127 +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +#: ipaserver/plugins/host.py:130 +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#: ipaserver/plugins/host.py:509 +msgid "Base-64 encoded host certificate" +msgstr "" + +#: ipaserver/plugins/host.py:557 ipaserver/plugins/service.py:484 +#: ipaserver/plugins/baseuser.py:257 +msgid "Principal alias" +msgstr "" + +#: ipaserver/plugins/host.py:576 ipaserver/plugins/baseuser.py:353 +msgid "SSH public key fingerprint" +msgstr "" + +#: ipaserver/plugins/host.py:592 ipaserver/plugins/service.py:543 +msgid "Authentication Indicators" +msgstr "" + +#: ipaserver/plugins/host.py:593 ipaserver/plugins/service.py:544 +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#: ipaserver/plugins/host.py:663 #, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" +msgid "Added host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:785 +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:790 +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +#: ipaserver/plugins/host.py:869 +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#: ipaserver/plugins/host.py:885 +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/host.py:905 +msgid "Password cannot be set on enrolled host." +msgstr "" + +#: ipaserver/plugins/host.py:909 +msgid "cn is immutable" +msgstr "" + +#: ipaserver/plugins/host.py:1033 +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" msgstr[0] "" msgstr[1] "" -#: ipaserver/plugins/certprofile.py:222 +#: ipaserver/plugins/host.py:1188 #, python-format -msgid "Imported profile \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" msgstr "" -#: ipaserver/plugins/certprofile.py:247 +#: ipaserver/plugins/host.py:1363 #, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" +msgid "Added certificates to host \"%(value)s\"" msgstr "" -#: ipaserver/plugins/certprofile.py:255 +#: ipaserver/plugins/host.py:1370 #, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgid "Removed certificates from host \"%(value)s\"" msgstr "" -#: ipaserver/plugins/certprofile.py:282 +#: ipaserver/plugins/host.py:1386 +msgid "Add new principal alias to host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1387 #, python-format -msgid "Deleted profile \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" msgstr "" -#: ipaserver/plugins/certprofile.py:289 +#: ipaserver/plugins/host.py:1398 +msgid "Remove principal alias from a host entry" +msgstr "" + +#: ipaserver/plugins/host.py:1399 #, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgid "Removed aliases from host \"%(value)s\"" msgstr "" -#: ipaserver/plugins/certprofile.py:305 -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:322 -msgid "Certificate profiles cannot be renamed" -msgstr "" - -#: ipaserver/plugins/certprofile.py:327 -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#: ipaserver/plugins/config.py:41 -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#: ipaserver/plugins/config.py:107 -msgid "must be at least 10" -msgstr "" - -#: ipaserver/plugins/config.py:115 -msgid "configuration options" -msgstr "" - -#: ipaserver/plugins/config.py:150 ipaserver/plugins/config.py:151 -msgid "Configuration" -msgstr "" - -#: ipaserver/plugins/config.py:162 -msgid "Maximum hostname length" -msgstr "" - -#: ipaserver/plugins/config.py:266 -msgid "IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:267 -msgid "List of all IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:272 -msgid "Hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:273 -msgid "List of all hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:278 -msgid "IPA master capable of PKINIT" -msgstr "" - -#: ipaserver/plugins/config.py:279 -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#: ipaserver/plugins/config.py:284 -msgid "IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:285 -msgid "IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:290 -msgid "Hidden IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:291 -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:296 -msgid "IPA CA renewal master" -msgstr "" - -#: ipaserver/plugins/config.py:297 -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:303 -msgid "IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:308 -msgid "Hidden IPA KRA servers" -msgstr "" - -#: ipaserver/plugins/config.py:309 -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:321 ipaserver/plugins/dns.py:4119 -msgid "IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:322 -msgid "IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:327 -msgid "Hidden IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:328 -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:333 ipaserver/plugins/dns.py:4125 -msgid "IPA DNSSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:334 -msgid "DNSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:411 -msgid "Empty domain is not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:419 -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#: ipaserver/plugins/config.py:424 -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#: ipaserver/plugins/config.py:431 -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:483 -msgid "The group doesn't exist" -msgstr "" - -#: ipaserver/plugins/config.py:501 -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:521 -msgid "May not be empty" -msgstr "" - -#: ipaserver/plugins/config.py:540 -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -#: ipaserver/plugins/config.py:572 -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#: ipaserver/plugins/config.py:576 -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -#: ipaserver/plugins/config.py:588 -msgid "SELinux user map default user not in order list" -msgstr "" - -#: ipaserver/plugins/dns.py:100 -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -#: ipaserver/plugins/dns.py:102 -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:104 -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:110 -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -#: ipaserver/plugins/dns.py:112 -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:118 -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:126 -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -#: ipaserver/plugins/dns.py:135 -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -#: ipaserver/plugins/dns.py:138 -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:141 -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:144 -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -#: ipaserver/plugins/dns.py:147 -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:151 -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -#: ipaserver/plugins/dns.py:154 -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -#: ipaserver/plugins/dns.py:157 -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:160 -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:163 -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -#: ipaserver/plugins/dns.py:166 -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:179 -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:182 -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:185 -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -#: ipaserver/plugins/dns.py:190 -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:193 -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:200 -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:217 -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:220 -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -#: ipaserver/plugins/dns.py:233 -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:236 -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -#: ipaserver/plugins/dns.py:239 -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:242 -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -#: ipaserver/plugins/dns.py:245 -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:248 -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:252 -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:255 -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:259 -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:270 -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:277 -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -#: ipaserver/plugins/dns.py:280 -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:284 -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -#: ipaserver/plugins/dns.py:290 -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -#: ipaserver/plugins/dns.py:293 -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:296 -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -#: ipaserver/plugins/dns.py:299 -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:302 -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:307 -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -#: ipaserver/plugins/dns.py:310 -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -#: ipaserver/plugins/dns.py:315 -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -#: ipaserver/plugins/dns.py:318 -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -#: ipaserver/plugins/dns.py:406 -msgid "invalid IP network format" -msgstr "" - -#: ipaserver/plugins/dns.py:415 -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -#: ipaserver/plugins/dns.py:431 -msgid "invalid address format" -msgstr "" - -#: ipaserver/plugins/dns.py:475 -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -#: ipaserver/plugins/dns.py:484 -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -#: ipaserver/plugins/dns.py:487 -msgid "flags value: allowed interval 0-255" -msgstr "" - -#: ipaserver/plugins/dns.py:490 -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#: ipaserver/plugins/dns.py:498 -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#: ipaserver/plugins/dns.py:505 -msgid "invalid domain-name: not fully qualified" -msgstr "" - -#: ipaserver/plugins/dns.py:514 -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#: ipaserver/plugins/dns.py:555 -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#: ipaserver/plugins/dns.py:564 -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#: ipaserver/plugins/dns.py:581 -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#: ipaserver/plugins/dns.py:596 -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#: ipaserver/plugins/dns.py:606 -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#: ipaserver/plugins/dns.py:681 -#, python-format -msgid "%s record" -msgstr "" - -#: ipaserver/plugins/dns.py:683 -#, python-format -msgid "Raw %s records" -msgstr "" - -#: ipaserver/plugins/dns.py:684 -#, python-format -msgid "%s Record" -msgstr "" - -#: ipaserver/plugins/dns.py:685 -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#: ipaserver/plugins/dns.py:747 -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -#: ipaserver/plugins/dns.py:754 -msgid "Invalid number of parts!" -msgstr "" - -#: ipaserver/plugins/dns.py:806 -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#: ipaserver/plugins/dns.py:822 -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -#: ipaserver/plugins/dns.py:897 -msgid "Create reverse" -msgstr "" - -#: ipaserver/plugins/dns.py:933 -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -#: ipaserver/plugins/dns.py:1108 ipaserver/plugins/dns.py:1265 -msgid "Exchanger" -msgstr "" - -#: ipaserver/plugins/dns.py:1183 -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#: ipaserver/plugins/dns.py:1237 -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -#: ipaserver/plugins/dns.py:1292 -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#: ipaserver/plugins/dns.py:1353 ipaserver/plugins/dns.py:1483 -msgid "Priority (order)" -msgstr "" - -#: ipaserver/plugins/dns.py:1354 -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -#: ipaserver/plugins/dns.py:1362 ipaserver/plugins/dns.py:1492 -msgid "Relative weight for entries with the same priority." -msgstr "" - -#: ipaserver/plugins/dns.py:1382 -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -#: ipaserver/plugins/dns.py:1484 -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -#: ipaserver/plugins/dns.py:1497 -msgid "Target Uniform Resource Identifier" -msgstr "" - -#: ipaserver/plugins/dns.py:1498 -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#: ipaserver/plugins/dns.py:1580 -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -#: ipaserver/plugins/dns.py:2049 -msgid "Managedby permission" -msgstr "" - -#: ipaserver/plugins/dns.py:2150 -msgid "cannot be used when a zone is specified" -msgstr "" - -#: ipaserver/plugins/dns.py:2162 -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#: ipaserver/plugins/dns.py:2305 -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2335 -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#: ipaserver/plugins/dns.py:2363 -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2399 -msgid "DNS zone" -msgstr "" - -#: ipaserver/plugins/dns.py:2400 -msgid "DNS zones" -msgstr "" - -#: ipaserver/plugins/dns.py:2408 -msgid "DNS Zones" -msgstr "" - -#: ipaserver/plugins/dns.py:2409 -msgid "DNS Zone" -msgstr "" - -#: ipaserver/plugins/dns.py:2481 -msgid "Default time to live" -msgstr "" - -#: ipaserver/plugins/dns.py:2482 -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -#: ipaserver/plugins/dns.py:2697 -msgid "setting Authoritative nameserver" -msgstr "" - -#: ipaserver/plugins/dns.py:2698 -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -#: ipaserver/plugins/dns.py:2700 -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -#: ipaserver/plugins/dns.py:2735 -msgid "" -msgstr "" - -#: ipaserver/plugins/dns.py:2791 -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#: ipaserver/plugins/dns.py:2846 -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2899 -msgid "is required" -msgstr "" - -#: ipaserver/plugins/dns.py:2980 -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2991 -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3016 -msgid "DNS resource record" -msgstr "" - -#: ipaserver/plugins/dns.py:3017 -msgid "DNS resource records" -msgstr "" - -#: ipaserver/plugins/dns.py:3024 -msgid "DNS Resource Records" -msgstr "" - -#: ipaserver/plugins/dns.py:3025 -msgid "DNS Resource Record" -msgstr "" - -#: ipaserver/plugins/dns.py:3060 -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3077 -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#: ipaserver/plugins/dns.py:3088 -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3133 -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -#: ipaserver/plugins/dns.py:3175 -msgid "only master zones can contain records" -msgstr "" - -#: ipaserver/plugins/dns.py:3273 -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -#: ipaserver/plugins/dns.py:3279 -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -#: ipaserver/plugins/dns.py:3287 -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3303 -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -#: ipaserver/plugins/dns.py:3319 -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3600 -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -#: ipaserver/plugins/dns.py:3726 -msgid "DNS zone root record cannot be renamed" -msgstr "" - -#: ipaserver/plugins/dns.py:3744 -msgid "DNS records can be only updated one at a time" -msgstr "" - -#: ipaserver/plugins/dns.py:3837 -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3930 -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#: ipaserver/plugins/dns.py:4032 -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#: ipaserver/plugins/dns.py:4047 -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -#: ipaserver/plugins/dns.py:4078 -msgid "DNS configuration options" -msgstr "" - -#: ipaserver/plugins/dns.py:4083 ipaserver/plugins/dns.py:4084 -msgid "DNS Global Configuration" -msgstr "" - -#: ipaserver/plugins/dns.py:4115 -msgid "IPA DNS version" -msgstr "" - -#: ipaserver/plugins/dns.py:4120 -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -#: ipaserver/plugins/dns.py:4126 -msgid "IPA server configured as DNSSec key master" -msgstr "" - -#: ipaserver/plugins/dns.py:4177 -msgid "Global DNS configuration is empty" -msgstr "" - -#: ipaserver/plugins/dns.py:4258 -msgid "DNS forward zone" -msgstr "" - -#: ipaserver/plugins/dns.py:4259 -msgid "DNS forward zones" -msgstr "" - -#: ipaserver/plugins/dns.py:4261 -msgid "DNS Forward Zones" -msgstr "" - -#: ipaserver/plugins/dns.py:4262 -msgid "DNS Forward Zone" -msgstr "" - -#: ipaserver/plugins/dns.py:4369 ipaserver/plugins/dns.py:4419 -msgid "Please specify forwarders." -msgstr "" - -#: ipaserver/plugins/dns.py:4388 -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4445 -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4451 -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4474 -msgid "IPA DNS records" -msgstr "" - -#: ipaserver/plugins/dns.py:4478 -msgid "IPA location records" -msgstr "" - -#: ipaserver/plugins/dns.py:4485 -msgid "Update location and IPA server DNS records" -msgstr "" - -#: ipaserver/plugins/dns.py:4496 -msgid "Result of the command" -msgstr "" - -#: ipaserver/plugins/dns.py:4503 -msgid "Dry run" -msgstr "" - -#: ipaserver/plugins/dns.py:4504 -msgid "Do not update records only return expected records" -msgstr "" - -#: ipaserver/plugins/privilege.py:76 -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:149 -msgid "Privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:169 -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:176 -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:183 -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:191 -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - #: ipaserver/plugins/pwpolicy.py:92 msgid "Class of Service object used for linking policies with groups" msgstr "" @@ -25477,6 +25044,782 @@ msgstr "" msgid "priority cannot be set on global policy" msgstr "" +#: ipaserver/plugins/trust.py:83 +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#: ipaserver/plugins/trust.py:226 +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +#: ipaserver/plugins/trust.py:239 ipaserver/plugins/trust.py:871 +#: ipaserver/plugins/trust.py:887 ipaserver/plugins/trust.py:908 +#: ipaserver/plugins/trust.py:918 ipaserver/plugins/trust.py:1071 +#: ipaserver/plugins/trust.py:1106 +msgid "AD Trust setup" +msgstr "" + +#: ipaserver/plugins/trust.py:250 +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +#: ipaserver/plugins/trust.py:260 +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +#: ipaserver/plugins/trust.py:345 ipaserver/plugins/hbactest.py:408 +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#: ipaserver/plugins/trust.py:474 +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#: ipaserver/plugins/trust.py:487 +msgid "trust" +msgstr "" + +#: ipaserver/plugins/trust.py:488 +msgid "trusts" +msgstr "" + +#: ipaserver/plugins/trust.py:531 +msgid "Trust" +msgstr "" + +#: ipaserver/plugins/trust.py:549 +msgid "SID blocklist incoming" +msgstr "" + +#: ipaserver/plugins/trust.py:553 +msgid "SID blocklist outgoing" +msgstr "" + +#: ipaserver/plugins/trust.py:569 +msgid "UPN suffixes" +msgstr "" + +#: ipaserver/plugins/trust.py:586 +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +#: ipaserver/plugins/trust.py:654 +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +#: ipaserver/plugins/trust.py:712 +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#: ipaserver/plugins/trust.py:724 +msgid "External trust" +msgstr "" + +#: ipaserver/plugins/trust.py:726 +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#: ipaserver/plugins/trust.py:732 +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:733 +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:829 +msgid "missing base_id" +msgstr "" + +#: ipaserver/plugins/trust.py:831 +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#: ipaserver/plugins/trust.py:841 +msgid "trust type" +msgstr "" + +#: ipaserver/plugins/trust.py:842 +msgid "only \"ad\" is supported" +msgstr "" + +#: ipaserver/plugins/trust.py:848 ipaserver/plugins/certmap.py:141 +#: ipaserver/plugins/certmap.py:148 ipaserver/plugins/certmap.py:175 +msgid "domain" +msgstr "" + +#: ipaserver/plugins/trust.py:849 +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +#: ipaserver/plugins/trust.py:862 +msgid "Realm-domain mismatch" +msgstr "" + +#: ipaserver/plugins/trust.py:863 +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#: ipaserver/plugins/trust.py:889 +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +#: ipaserver/plugins/trust.py:910 +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +#: ipaserver/plugins/trust.py:919 +msgid "Realm administrator password should be specified" +msgstr "" + +#: ipaserver/plugins/trust.py:940 +msgid "id range type" +msgstr "" + +#: ipaserver/plugins/trust.py:942 +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +#: ipaserver/plugins/trust.py:952 +msgid "id range" +msgstr "" + +#: ipaserver/plugins/trust.py:954 +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +#: ipaserver/plugins/trust.py:976 +msgid "range exists" +msgstr "" + +#: ipaserver/plugins/trust.py:978 +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +#: ipaserver/plugins/trust.py:986 +msgid "range type change" +msgstr "" + +#: ipaserver/plugins/trust.py:987 +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#: ipaserver/plugins/trust.py:1025 +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +#: ipaserver/plugins/trust.py:1039 +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#: ipaserver/plugins/trust.py:1045 +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#: ipaserver/plugins/trust.py:1057 +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +#: ipaserver/plugins/trust.py:1072 +msgid "Unable to verify write permissions to the AD" +msgstr "" + +#: ipaserver/plugins/trust.py:1107 +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#: ipaserver/plugins/trust.py:1115 +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1120 +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#: ipaserver/plugins/trust.py:1127 +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#: ipaserver/plugins/trust.py:1145 +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/trust.py:1234 +msgid "trust configuration" +msgstr "" + +#: ipaserver/plugins/trust.py:1240 ipaserver/plugins/trust.py:1241 +msgid "Global Trust Configuration" +msgstr "" + +#: ipaserver/plugins/trust.py:1266 +msgid "IPA AD trust agents" +msgstr "" + +#: ipaserver/plugins/trust.py:1267 +msgid "IPA servers configured as AD trust agents" +msgstr "" + +#: ipaserver/plugins/trust.py:1272 +msgid "IPA AD trust controllers" +msgstr "" + +#: ipaserver/plugins/trust.py:1273 +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#: ipaserver/plugins/trust.py:1287 +msgid "unsupported trust type" +msgstr "" + +#: ipaserver/plugins/trust.py:1354 +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +#: ipaserver/plugins/trust.py:1419 +msgid "SID" +msgstr "" + +#: ipaserver/plugins/trust.py:1545 +msgid "sidgen_was_run" +msgstr "" + +#: ipaserver/plugins/trust.py:1547 +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +#: ipaserver/plugins/trust.py:1566 +msgid "trust domain" +msgstr "" + +#: ipaserver/plugins/trust.py:1567 +msgid "trust domains" +msgstr "" + +#: ipaserver/plugins/trust.py:1575 +msgid "Trusted domains" +msgstr "" + +#: ipaserver/plugins/trust.py:1576 +msgid "Trusted domain" +msgstr "" + +#: ipaserver/plugins/trust.py:1590 +msgid "Domain enabled" +msgstr "" + +#: ipaserver/plugins/trust.py:1662 +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1680 +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#: ipaserver/plugins/trust.py:1831 +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +#: ipaserver/plugins/trust.py:1839 +msgid "Configure this server as a trust agent." +msgstr "" + +#: ipaserver/plugins/trust.py:1855 +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#: ipaserver/plugins/trust.py:1871 +msgid "not allowed to remotely add agent" +msgstr "" + +#: ipaserver/plugins/trust.py:1907 +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1916 +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#: ipaserver/plugins/trust.py:1949 +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/trust.py:1958 +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#: ipaserver/plugins/certmap.py:50 +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:52 +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:54 +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:62 +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:65 +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:68 +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:71 +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:74 +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:77 +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:80 +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:83 +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:86 +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#: ipaserver/plugins/certmap.py:142 +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +#: ipaserver/plugins/certmap.py:149 +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:176 +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#: ipaserver/plugins/certmap.py:186 +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +#: ipaserver/plugins/certmap.py:191 ipaserver/plugins/certmap.py:192 +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +#: ipaserver/plugins/certmap.py:198 +msgid "Prompt for the username" +msgstr "" + +#: ipaserver/plugins/certmap.py:199 +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +#: ipaserver/plugins/certmap.py:229 +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +#: ipaserver/plugins/certmap.py:234 +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +#: ipaserver/plugins/certmap.py:243 ipaserver/plugins/certmap.py:247 +msgid "Certificate Identity Mapping Rules" +msgstr "" + +#: ipaserver/plugins/certmap.py:244 ipaserver/plugins/certmap.py:246 +msgid "Certificate Identity Mapping Rule" +msgstr "" + +#: ipaserver/plugins/certmap.py:274 +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +#: ipaserver/plugins/certmap.py:280 +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +#: ipaserver/plugins/certmap.py:285 +msgid "Mapping rule" +msgstr "" + +#: ipaserver/plugins/certmap.py:286 +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +#: ipaserver/plugins/certmap.py:291 +msgid "Matching rule" +msgstr "" + +#: ipaserver/plugins/certmap.py:292 +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +#: ipaserver/plugins/certmap.py:299 +msgid "Domain where the user entry will be searched" +msgstr "" + +#: ipaserver/plugins/certmap.py:305 +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +#: ipaserver/plugins/certmap.py:356 +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:358 +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:369 +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:371 +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:392 +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#: ipaserver/plugins/certmap.py:395 +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/certmap.py:402 +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:408 +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:410 +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:415 +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:417 +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:444 +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#: ipaserver/plugins/certmap.py:446 +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/certmap.py:500 +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +#: ipaserver/plugins/certmap.py:554 +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#: ipaserver/plugins/certmap.py:571 +msgid "User logins" +msgstr "" + +#: ipaserver/plugins/certmap.py:579 +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#: ipaserver/plugins/certmap.py:587 +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#: ipaserver/plugins/privilege.py:76 +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:149 +msgid "Privilege" +msgstr "" + +#: ipaserver/plugins/privilege.py:169 +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:176 +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:183 +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#: ipaserver/plugins/privilege.py:191 +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + #: ipaserver/plugins/session.py:12 msgid "" "\n" @@ -25971,490 +26314,11 @@ msgstr "" msgid "Unresolved rules in --rules" msgstr "" -#: ipaserver/plugins/hbactest.py:408 ipaserver/plugins/trust.py:345 -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - #: ipaserver/plugins/hbactest.py:497 #, python-format msgid "Access granted: %s" msgstr "" -#: ipaserver/plugins/trust.py:83 -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#: ipaserver/plugins/trust.py:226 -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -#: ipaserver/plugins/trust.py:239 ipaserver/plugins/trust.py:871 -#: ipaserver/plugins/trust.py:887 ipaserver/plugins/trust.py:908 -#: ipaserver/plugins/trust.py:918 ipaserver/plugins/trust.py:1071 -#: ipaserver/plugins/trust.py:1106 -msgid "AD Trust setup" -msgstr "" - -#: ipaserver/plugins/trust.py:250 -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -#: ipaserver/plugins/trust.py:260 -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -#: ipaserver/plugins/trust.py:474 -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/trust.py:487 -msgid "trust" -msgstr "" - -#: ipaserver/plugins/trust.py:488 -msgid "trusts" -msgstr "" - -#: ipaserver/plugins/trust.py:531 -msgid "Trust" -msgstr "" - -#: ipaserver/plugins/trust.py:549 -msgid "SID blocklist incoming" -msgstr "" - -#: ipaserver/plugins/trust.py:553 -msgid "SID blocklist outgoing" -msgstr "" - -#: ipaserver/plugins/trust.py:569 -msgid "UPN suffixes" -msgstr "" - -#: ipaserver/plugins/trust.py:586 -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -#: ipaserver/plugins/trust.py:654 -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -#: ipaserver/plugins/trust.py:712 -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#: ipaserver/plugins/trust.py:724 -msgid "External trust" -msgstr "" - -#: ipaserver/plugins/trust.py:726 -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#: ipaserver/plugins/trust.py:732 -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:733 -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:829 -msgid "missing base_id" -msgstr "" - -#: ipaserver/plugins/trust.py:831 -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#: ipaserver/plugins/trust.py:841 -msgid "trust type" -msgstr "" - -#: ipaserver/plugins/trust.py:842 -msgid "only \"ad\" is supported" -msgstr "" - -#: ipaserver/plugins/trust.py:849 -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -#: ipaserver/plugins/trust.py:862 -msgid "Realm-domain mismatch" -msgstr "" - -#: ipaserver/plugins/trust.py:863 -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#: ipaserver/plugins/trust.py:889 -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -#: ipaserver/plugins/trust.py:910 -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -#: ipaserver/plugins/trust.py:919 -msgid "Realm administrator password should be specified" -msgstr "" - -#: ipaserver/plugins/trust.py:940 -msgid "id range type" -msgstr "" - -#: ipaserver/plugins/trust.py:942 -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -#: ipaserver/plugins/trust.py:952 -msgid "id range" -msgstr "" - -#: ipaserver/plugins/trust.py:954 -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -#: ipaserver/plugins/trust.py:976 -msgid "range exists" -msgstr "" - -#: ipaserver/plugins/trust.py:978 -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -#: ipaserver/plugins/trust.py:986 -msgid "range type change" -msgstr "" - -#: ipaserver/plugins/trust.py:987 -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#: ipaserver/plugins/trust.py:1025 -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -#: ipaserver/plugins/trust.py:1039 -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#: ipaserver/plugins/trust.py:1045 -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#: ipaserver/plugins/trust.py:1057 -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -#: ipaserver/plugins/trust.py:1072 -msgid "Unable to verify write permissions to the AD" -msgstr "" - -#: ipaserver/plugins/trust.py:1107 -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#: ipaserver/plugins/trust.py:1115 -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1120 -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#: ipaserver/plugins/trust.py:1127 -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#: ipaserver/plugins/trust.py:1145 -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/trust.py:1234 -msgid "trust configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1240 ipaserver/plugins/trust.py:1241 -msgid "Global Trust Configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1266 -msgid "IPA AD trust agents" -msgstr "" - -#: ipaserver/plugins/trust.py:1267 -msgid "IPA servers configured as AD trust agents" -msgstr "" - -#: ipaserver/plugins/trust.py:1272 -msgid "IPA AD trust controllers" -msgstr "" - -#: ipaserver/plugins/trust.py:1273 -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#: ipaserver/plugins/trust.py:1287 -msgid "unsupported trust type" -msgstr "" - -#: ipaserver/plugins/trust.py:1354 -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1419 -msgid "SID" -msgstr "" - -#: ipaserver/plugins/trust.py:1545 -msgid "sidgen_was_run" -msgstr "" - -#: ipaserver/plugins/trust.py:1547 -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -#: ipaserver/plugins/trust.py:1566 -msgid "trust domain" -msgstr "" - -#: ipaserver/plugins/trust.py:1567 -msgid "trust domains" -msgstr "" - -#: ipaserver/plugins/trust.py:1575 -msgid "Trusted domains" -msgstr "" - -#: ipaserver/plugins/trust.py:1576 -msgid "Trusted domain" -msgstr "" - -#: ipaserver/plugins/trust.py:1590 -msgid "Domain enabled" -msgstr "" - -#: ipaserver/plugins/trust.py:1662 -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1680 -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#: ipaserver/plugins/trust.py:1831 -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -#: ipaserver/plugins/trust.py:1839 -msgid "Configure this server as a trust agent." -msgstr "" - -#: ipaserver/plugins/trust.py:1855 -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#: ipaserver/plugins/trust.py:1871 -msgid "not allowed to remotely add agent" -msgstr "" - -#: ipaserver/plugins/trust.py:1907 -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1916 -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#: ipaserver/plugins/trust.py:1949 -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1958 -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - #: ipaserver/plugins/virtual.py:57 msgid "operation not defined" msgstr "" @@ -26468,6 +26332,138 @@ msgstr "" msgid "No such virtual command" msgstr "" +#: ipaserver/plugins/baseldap.py:101 +msgid "Member service groups" +msgstr "" + +#: ipaserver/plugins/baseldap.py:110 +msgid "Member HBAC service groups" +msgstr "" + +#: ipaserver/plugins/baseldap.py:125 +msgid "Member ID user overrides" +msgstr "" + +#: ipaserver/plugins/baseldap.py:127 +msgid "Indirect Member ID user overrides" +msgstr "" + +#: ipaserver/plugins/baseldap.py:144 +msgid "Indirect Member permissions" +msgstr "" + +#: ipaserver/plugins/baseldap.py:147 +msgid "Indirect Member HBAC service" +msgstr "" + +#: ipaserver/plugins/baseldap.py:150 +msgid "Indirect Member HBAC service group" +msgstr "" + +#: ipaserver/plugins/baseldap.py:211 +msgid "Invalid format. Should be name=value" +msgstr "" + +#: ipaserver/plugins/baseldap.py:582 +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +#: ipaserver/plugins/baseldap.py:613 +msgid "entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:614 +msgid "entries" +msgstr "" + +#: ipaserver/plugins/baseldap.py:652 ipaserver/plugins/baseldap.py:653 +msgid "Entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:656 +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:657 +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#: ipaserver/plugins/baseldap.py:659 +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#: ipaserver/plugins/baseldap.py:946 ipaserver/plugins/baseldap.py:954 +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#: ipaserver/plugins/baseldap.py:959 +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1017 +msgid "attribute is not configurable" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1120 +msgid "No such attribute on this entry" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1476 +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1574 ipaserver/plugins/baseldap.py:2482 +msgid "the entry was deleted while being modified" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1707 ipaserver/plugins/baseldap.py:2209 +#, python-format +msgid "%s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1750 ipaserver/plugins/baseldap.py:2233 +#, python-format +msgid "%s to add" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1849 ipaserver/plugins/baseldap.py:2332 +#, python-format +msgid "%s to remove" +msgstr "" + +#: ipaserver/plugins/baseldap.py:1957 +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#: ipaserver/plugins/baseldap.py:1958 +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#: ipaserver/plugins/baseldap.py:2513 +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:2527 +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +#: ipaserver/plugins/baseldap.py:2536 +msgid "one or more values to remove" +msgstr "" + #: ipaserver/plugins/baseuser.py:57 msgid "" "\n" @@ -26763,71 +26759,6 @@ msgstr "" msgid "must be enabled only on a single master" msgstr "" -#: ipaserver/dcerpc_common.py:20 -msgid "Trusting forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:21 -msgid "Trusted forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:26 -msgid "Established and verified" -msgstr "" - -#: ipaserver/dcerpc_common.py:27 -msgid "Waiting for confirmation by remote side" -msgstr "" - -#: ipaserver/dcerpc_common.py:30 -msgid "Unknown" -msgstr "" - -#: ipaserver/dcerpc_common.py:36 -msgid "Non-Active Directory domain" -msgstr "" - -#: ipaserver/dcerpc_common.py:38 -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -#: ipaserver/dcerpc_common.py:39 -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:41 -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -#: ipaserver/rpcserver.py:533 -msgid "Request must be a dict" -msgstr "" - -#: ipaserver/rpcserver.py:535 -msgid "Request is missing \"method\"" -msgstr "" - -#: ipaserver/rpcserver.py:537 -msgid "Request is missing \"params\"" -msgstr "" - -#: ipaserver/rpcserver.py:542 -msgid "params must be a list" -msgstr "" - -#: ipaserver/rpcserver.py:544 -msgid "params must contain [args, options]" -msgstr "" - -#: ipaserver/rpcserver.py:547 -msgid "params[0] (aka args) must be a list" -msgstr "" - -#: ipaserver/rpcserver.py:550 -msgid "params[1] (aka options) must be a dict" -msgstr "" - #: ipaserver/dcerpc.py:87 msgid "" "\n" @@ -27008,6 +26939,43 @@ msgid "" "instead" msgstr "" +#: ipaserver/dcerpc_common.py:20 +msgid "Trusting forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:21 +msgid "Trusted forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:26 +msgid "Established and verified" +msgstr "" + +#: ipaserver/dcerpc_common.py:27 +msgid "Waiting for confirmation by remote side" +msgstr "" + +#: ipaserver/dcerpc_common.py:30 +msgid "Unknown" +msgstr "" + +#: ipaserver/dcerpc_common.py:36 +msgid "Non-Active Directory domain" +msgstr "" + +#: ipaserver/dcerpc_common.py:38 +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +#: ipaserver/dcerpc_common.py:39 +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +#: ipaserver/dcerpc_common.py:41 +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + #: ipaserver/topology.py:14 #, python-format msgid "" @@ -27030,6 +26998,34 @@ msgstr "" msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" +#: ipaserver/rpcserver.py:533 +msgid "Request must be a dict" +msgstr "" + +#: ipaserver/rpcserver.py:535 +msgid "Request is missing \"method\"" +msgstr "" + +#: ipaserver/rpcserver.py:537 +msgid "Request is missing \"params\"" +msgstr "" + +#: ipaserver/rpcserver.py:542 +msgid "params must be a list" +msgstr "" + +#: ipaserver/rpcserver.py:544 +msgid "params must contain [args, options]" +msgstr "" + +#: ipaserver/rpcserver.py:547 +msgid "params[0] (aka args) must be a list" +msgstr "" + +#: ipaserver/rpcserver.py:550 +msgid "params[1] (aka options) must be a dict" +msgstr "" + #: ipatests/test_ipalib/test_frontend.py:206 #, python-format msgid "must equal %r"